Overview

overview

10

Static

static

8a43d088eb...01.exe

windows7-x64

10

8a43d088eb...01.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8a43d088ebf1ad1c9f9570f9ccbae180e8c5aed178830f33d6978d92668e3d01

  • Size

    336KB

  • Sample

    221204-h9mnnace4z

  • MD5

    75c816bbd7e4e87f1558722be44ded90

  • SHA1

    81afd038e26d1d8cdade984121642bf4f6ae6ad7

  • SHA256

    8a43d088ebf1ad1c9f9570f9ccbae180e8c5aed178830f33d6978d92668e3d01

  • SHA512

    59edc5e4c78d8490038a464b90c69802d453f6eb0784d8cae481d9e07936362b34f1bddc2afb7c788574d0d177cb1d397cc87fbae9bd403dfd22b04506e3327d

  • SSDEEP

    6144:mANxv2WGk1Y3nmQcuyKQ5DzEJewavj9+zU5StNp:Lr2WGk1Y3nmQcjKAPEJlb

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8a43d088ebf1ad1c9f9570f9ccbae180e8c5aed178830f33d6978d92668e3d01

    • Size

      336KB

    • MD5

      75c816bbd7e4e87f1558722be44ded90

    • SHA1

      81afd038e26d1d8cdade984121642bf4f6ae6ad7

    • SHA256

      8a43d088ebf1ad1c9f9570f9ccbae180e8c5aed178830f33d6978d92668e3d01

    • SHA512

      59edc5e4c78d8490038a464b90c69802d453f6eb0784d8cae481d9e07936362b34f1bddc2afb7c788574d0d177cb1d397cc87fbae9bd403dfd22b04506e3327d

    • SSDEEP

      6144:mANxv2WGk1Y3nmQcuyKQ5DzEJewavj9+zU5StNp:Lr2WGk1Y3nmQcjKAPEJlb

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks