Overview

overview

10

Static

static

a90037b93e...d4.exe

windows7-x64

10

a90037b93e...d4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a90037b93ee6b719096ceb8193c3ae2deb016ffdfe15417152da580083c4b9d4

  • Size

    216KB

  • Sample

    221203-yqrq9seg7w

  • MD5

    c1ae6a71dd5adac2a52ffae2ecd89123

  • SHA1

    226606621a3a160450f5d6a09ebcc628453f91bb

  • SHA256

    a90037b93ee6b719096ceb8193c3ae2deb016ffdfe15417152da580083c4b9d4

  • SHA512

    4fecce67e9e1411b6464412525d35ec5efd9fc8c1625a6bbb657f9861bcc319d501aab90b5d501f5d570791b611cd02a8b2811e2bb28d2af17b8b8d70a9b932c

  • SSDEEP

    3072:h4OzH5gn9OdmLGeCfcpwA5f3CEoEtUMbfwDQ:aOzUOK7cKiED54Q

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a90037b93ee6b719096ceb8193c3ae2deb016ffdfe15417152da580083c4b9d4

    • Size

      216KB

    • MD5

      c1ae6a71dd5adac2a52ffae2ecd89123

    • SHA1

      226606621a3a160450f5d6a09ebcc628453f91bb

    • SHA256

      a90037b93ee6b719096ceb8193c3ae2deb016ffdfe15417152da580083c4b9d4

    • SHA512

      4fecce67e9e1411b6464412525d35ec5efd9fc8c1625a6bbb657f9861bcc319d501aab90b5d501f5d570791b611cd02a8b2811e2bb28d2af17b8b8d70a9b932c

    • SSDEEP

      3072:h4OzH5gn9OdmLGeCfcpwA5f3CEoEtUMbfwDQ:aOzUOK7cKiED54Q

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks