Overview

overview

10

Static

static

6d03c13695...f1.exe

windows7-x64

10

6d03c13695...f1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6d03c136954977c15156acfdfb90ad710cd6369a86ace2eeb9b6e01cffa5d5f1

  • Size

    168KB

  • Sample

    221204-np187sec76

  • MD5

    2d1aab3fe9d3144b4c8bb42b185d9430

  • SHA1

    02926c44dfbc1b60bae42a756d354ce6b60a7d8a

  • SHA256

    6d03c136954977c15156acfdfb90ad710cd6369a86ace2eeb9b6e01cffa5d5f1

  • SHA512

    ac516601cc8604fa305576b4ddd14fc7cb04d60c8b243d3eb427ccd732cc738a486b45233532c5da3d28563c752674a67de1b9b3f0d816ec736ad49aafc5bd54

  • SSDEEP

    1536:oez5LcmJPqP3izTGRVu+1niPRC7gIeTo8dzQhihZOy+AMnmE7UkAUJZvhICqDoj4:pmiPqP3izTGRVuI7bkzrhT+nmEASq

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6d03c136954977c15156acfdfb90ad710cd6369a86ace2eeb9b6e01cffa5d5f1

    • Size

      168KB

    • MD5

      2d1aab3fe9d3144b4c8bb42b185d9430

    • SHA1

      02926c44dfbc1b60bae42a756d354ce6b60a7d8a

    • SHA256

      6d03c136954977c15156acfdfb90ad710cd6369a86ace2eeb9b6e01cffa5d5f1

    • SHA512

      ac516601cc8604fa305576b4ddd14fc7cb04d60c8b243d3eb427ccd732cc738a486b45233532c5da3d28563c752674a67de1b9b3f0d816ec736ad49aafc5bd54

    • SSDEEP

      1536:oez5LcmJPqP3izTGRVu+1niPRC7gIeTo8dzQhihZOy+AMnmE7UkAUJZvhICqDoj4:pmiPqP3izTGRVuI7bkzrhT+nmEASq

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks