Overview

overview

10

Static

static

ccb438249a...66.exe

windows7-x64

10

ccb438249a...66.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ccb438249ae8fa4a75021dc20c446f56065914b833c45b36926275c6bf5b2466

  • Size

    688KB

  • Sample

    221205-1s3yesea5y

  • MD5

    449c99d2a7d3c5e39efe1db6888983fc

  • SHA1

    176b8f1c08fbdccf506fb955e7de0fb60716f03e

  • SHA256

    ccb438249ae8fa4a75021dc20c446f56065914b833c45b36926275c6bf5b2466

  • SHA512

    ac0917408e911cc24dd0a8d378569d8817d8cd6c3147a71872f1e975299fb5384a30d308bca4c9c428382b381c764116260f447c3b75b5bfa9f5a7dcaff1cd3e

  • SSDEEP

    12288:g72bntEL772bntELb72bntEL772bntELo7:g72ze72zY72ze72zx

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ccb438249ae8fa4a75021dc20c446f56065914b833c45b36926275c6bf5b2466

    • Size

      688KB

    • MD5

      449c99d2a7d3c5e39efe1db6888983fc

    • SHA1

      176b8f1c08fbdccf506fb955e7de0fb60716f03e

    • SHA256

      ccb438249ae8fa4a75021dc20c446f56065914b833c45b36926275c6bf5b2466

    • SHA512

      ac0917408e911cc24dd0a8d378569d8817d8cd6c3147a71872f1e975299fb5384a30d308bca4c9c428382b381c764116260f447c3b75b5bfa9f5a7dcaff1cd3e

    • SSDEEP

      12288:g72bntEL772bntELb72bntEL772bntELo7:g72ze72zY72ze72zx

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks