Overview

overview

10

Static

static

fbf5ec6318...e4.exe

windows7-x64

10

fbf5ec6318...e4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbf5ec63187aa100c3f3f70d7353cc410f0ecd904e2daf2c4217ee2f4c820de4

  • Size

    156KB

  • Sample

    221203-yeqptsdg4v

  • MD5

    f111dffbff9a7498c87afbcea8837fe8

  • SHA1

    c872cd7a2ba957ad73a4777a507237d334780614

  • SHA256

    fbf5ec63187aa100c3f3f70d7353cc410f0ecd904e2daf2c4217ee2f4c820de4

  • SHA512

    eac5b74f6cf4fe4dc573a5dd0beb297602c815aa4e8e477f5e04b5999070ae19bd5ab4586f3fc49c7413c5b4db1af7bca90d4622b23ab1a45ea6f7734b12ad62

  • SSDEEP

    3072:QBd1HE2MtU7Qv0w4ZRRQMMDwtIMCeFP4ANA4oQZiEbL:Sd5E2R7Qvb4tQTaCeFP4A+WN

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fbf5ec63187aa100c3f3f70d7353cc410f0ecd904e2daf2c4217ee2f4c820de4

    • Size

      156KB

    • MD5

      f111dffbff9a7498c87afbcea8837fe8

    • SHA1

      c872cd7a2ba957ad73a4777a507237d334780614

    • SHA256

      fbf5ec63187aa100c3f3f70d7353cc410f0ecd904e2daf2c4217ee2f4c820de4

    • SHA512

      eac5b74f6cf4fe4dc573a5dd0beb297602c815aa4e8e477f5e04b5999070ae19bd5ab4586f3fc49c7413c5b4db1af7bca90d4622b23ab1a45ea6f7734b12ad62

    • SSDEEP

      3072:QBd1HE2MtU7Qv0w4ZRRQMMDwtIMCeFP4ANA4oQZiEbL:Sd5E2R7Qvb4tQTaCeFP4A+WN

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks