Overview

overview

8

Static

static

a3cc4e0a61...90.exe

windows7-x64

8

a3cc4e0a61...90.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3cc4e0a611bf32204395e0ce5df69b65c182e09e2f73c553111ec2621932590

  • Size

    247KB

  • Sample

    221204-ltejwscc2x

  • MD5

    2bf5bb53aecb29ded19bf982a28f2a77

  • SHA1

    dc3ad09104220460d4d1bd26b50ee33f5221873d

  • SHA256

    a3cc4e0a611bf32204395e0ce5df69b65c182e09e2f73c553111ec2621932590

  • SHA512

    f633cb1b1be15142b9b54a8e10bac9d1b0601f4339f8277d22022cc7712f4c66534a4e8d19138c249e80d52dbab4583e0f84052fb0e54e82de88f2af81523ace

  • SSDEEP

    6144:M75VB50aNosWWjOi8tXu1Xevfql2+6d93zGJ08QfP0ai9o3OxS2xk/R:K5VnKsWN+wGO89ai9UOZk

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      a3cc4e0a611bf32204395e0ce5df69b65c182e09e2f73c553111ec2621932590

    • Size

      247KB

    • MD5

      2bf5bb53aecb29ded19bf982a28f2a77

    • SHA1

      dc3ad09104220460d4d1bd26b50ee33f5221873d

    • SHA256

      a3cc4e0a611bf32204395e0ce5df69b65c182e09e2f73c553111ec2621932590

    • SHA512

      f633cb1b1be15142b9b54a8e10bac9d1b0601f4339f8277d22022cc7712f4c66534a4e8d19138c249e80d52dbab4583e0f84052fb0e54e82de88f2af81523ace

    • SSDEEP

      6144:M75VB50aNosWWjOi8tXu1Xevfql2+6d93zGJ08QfP0ai9o3OxS2xk/R:K5VnKsWN+wGO89ai9UOZk

    Score
    8/10
    evasionpersistence

    • Adds policy Run key to start application

      persistence

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks