Overview

overview

10

Static

static

9984de7e83...c3.exe

windows7-x64

10

9984de7e83...c3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9984de7e832e78435649f5c8cdf6d923209e8f8cc610da62f660d2a6b8ed40c3

  • Size

    136KB

  • Sample

    221203-yn8l1aef5y

  • MD5

    f932144013fd2c34fee504119d3652ff

  • SHA1

    ce6ee1bab12196094a4f9071fefca0bb2d4ec479

  • SHA256

    9984de7e832e78435649f5c8cdf6d923209e8f8cc610da62f660d2a6b8ed40c3

  • SHA512

    ecdaebde8d883f83ce8007e380799cb9c8465ae8d51a677f2ceec97d28311d324b7d2fe9b5869efb86a52ba3bedf17678d69c139d07bb271d4905eb0696b88f8

  • SSDEEP

    3072:vpSJovvXFwRBW1cQoj9MYuPCNtrK6tJTVUa3739ec9:mu/d2QRYjfTVU4te

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9984de7e832e78435649f5c8cdf6d923209e8f8cc610da62f660d2a6b8ed40c3

    • Size

      136KB

    • MD5

      f932144013fd2c34fee504119d3652ff

    • SHA1

      ce6ee1bab12196094a4f9071fefca0bb2d4ec479

    • SHA256

      9984de7e832e78435649f5c8cdf6d923209e8f8cc610da62f660d2a6b8ed40c3

    • SHA512

      ecdaebde8d883f83ce8007e380799cb9c8465ae8d51a677f2ceec97d28311d324b7d2fe9b5869efb86a52ba3bedf17678d69c139d07bb271d4905eb0696b88f8

    • SSDEEP

      3072:vpSJovvXFwRBW1cQoj9MYuPCNtrK6tJTVUa3739ec9:mu/d2QRYjfTVU4te

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks