Overview

overview

10

Static

static

ac505bb3f1...b7.exe

windows7-x64

3

ac505bb3f1...b7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ac505bb3f15b3bf137ac00a303baa98520dbe5bb19fdac413eeaab7ad48fd1b7

  • Size

    31KB

  • Sample

    221204-p9pxcafa7v

  • MD5

    087001b1628948077e7ae505cfd122d4

  • SHA1

    a57eed531b223b67335b3d1ea841382477ad02d5

  • SHA256

    ac505bb3f15b3bf137ac00a303baa98520dbe5bb19fdac413eeaab7ad48fd1b7

  • SHA512

    59c4af0e99c6854b7f70398d4ec3d63478624bd27c4554789c847fa36f762c7d7f8d41444fe8c61f7c6a3cea94fd0121fbd5bf8008744c92fbb794934be038a2

  • SSDEEP

    768:5uTCMHmpkxfEBV5Rtz+M4BijoIzAiSnaRh:5PzpkxMBV5Lz+uoIzAiB

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ac505bb3f15b3bf137ac00a303baa98520dbe5bb19fdac413eeaab7ad48fd1b7

    • Size

      31KB

    • MD5

      087001b1628948077e7ae505cfd122d4

    • SHA1

      a57eed531b223b67335b3d1ea841382477ad02d5

    • SHA256

      ac505bb3f15b3bf137ac00a303baa98520dbe5bb19fdac413eeaab7ad48fd1b7

    • SHA512

      59c4af0e99c6854b7f70398d4ec3d63478624bd27c4554789c847fa36f762c7d7f8d41444fe8c61f7c6a3cea94fd0121fbd5bf8008744c92fbb794934be038a2

    • SSDEEP

      768:5uTCMHmpkxfEBV5Rtz+M4BijoIzAiSnaRh:5PzpkxMBV5Lz+uoIzAiB

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks