Overview

overview

10

Static

static

8ebcc60ad6...ef.exe

windows7-x64

10

8ebcc60ad6...ef.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ebcc60ad65989a10b7479bbd53fe0eb0b7b693cba2ae1d092238b2ee7875bef

  • Size

    132KB

  • Sample

    221203-zck71ada42

  • MD5

    fc3128ee41e3fb7ee96cda8d066ea2d7

  • SHA1

    22a2d94178272d4a94278ba5bc0bfd3009c11456

  • SHA256

    8ebcc60ad65989a10b7479bbd53fe0eb0b7b693cba2ae1d092238b2ee7875bef

  • SHA512

    c0b2f46b8ef5a99b34160e120a63ab2208a4e1b76fd545afcce1867a5e3a24c86220702546039327dc4f21324e9883726219df7cd9699205c7e1c6c178695dc0

  • SSDEEP

    3072:DmRiCRN4RT+i5/vwOV/FB671omXB1Gt873:DmRiRT+i5rYo

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8ebcc60ad65989a10b7479bbd53fe0eb0b7b693cba2ae1d092238b2ee7875bef

    • Size

      132KB

    • MD5

      fc3128ee41e3fb7ee96cda8d066ea2d7

    • SHA1

      22a2d94178272d4a94278ba5bc0bfd3009c11456

    • SHA256

      8ebcc60ad65989a10b7479bbd53fe0eb0b7b693cba2ae1d092238b2ee7875bef

    • SHA512

      c0b2f46b8ef5a99b34160e120a63ab2208a4e1b76fd545afcce1867a5e3a24c86220702546039327dc4f21324e9883726219df7cd9699205c7e1c6c178695dc0

    • SSDEEP

      3072:DmRiCRN4RT+i5/vwOV/FB671omXB1Gt873:DmRiRT+i5rYo

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks