Overview

overview

10

Static

static

efaefad75d...a0.exe

windows7-x64

10

efaefad75d...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    efaefad75d1241505fe68bbb50ae9eedd9c8d3405655860a280a2c97687511a0

  • Size

    705KB

  • Sample

    221205-1stdzsea3x

  • MD5

    d921ad9f891b56390d92e809ec2a7f3c

  • SHA1

    6417a7d0ef879734a8c6e74081c8d197f4ae4197

  • SHA256

    efaefad75d1241505fe68bbb50ae9eedd9c8d3405655860a280a2c97687511a0

  • SHA512

    4d63e484f97afa8f3256ba4e80b29a6001aca9734c10b58013e6682bb61f82949bd68bd68b09aeba8d2545c34baef658ddb78ef999ea53844c4c75c0059e0c3e

  • SSDEEP

    12288:g72bntEDs72bntEDs72bntEDs72bntEDSk:g72zms72zms72zms72zmSk

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      efaefad75d1241505fe68bbb50ae9eedd9c8d3405655860a280a2c97687511a0

    • Size

      705KB

    • MD5

      d921ad9f891b56390d92e809ec2a7f3c

    • SHA1

      6417a7d0ef879734a8c6e74081c8d197f4ae4197

    • SHA256

      efaefad75d1241505fe68bbb50ae9eedd9c8d3405655860a280a2c97687511a0

    • SHA512

      4d63e484f97afa8f3256ba4e80b29a6001aca9734c10b58013e6682bb61f82949bd68bd68b09aeba8d2545c34baef658ddb78ef999ea53844c4c75c0059e0c3e

    • SSDEEP

      12288:g72bntEDs72bntEDs72bntEDs72bntEDSk:g72zms72zms72zms72zmSk

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks