Overview

overview

10

Static

static

b7ea5d88ee...d5.exe

windows7-x64

10

b7ea5d88ee...d5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b7ea5d88eea4a87ac850b243528cccdb60d7cc2825bbfa219c669a930c9ac2d5

  • Size

    702KB

  • Sample

    221205-1tdpxsbb48

  • MD5

    710267f20a06c598f14834f26d9d16ca

  • SHA1

    5779354fa15dd9b2aa687899dc5948a8236af085

  • SHA256

    b7ea5d88eea4a87ac850b243528cccdb60d7cc2825bbfa219c669a930c9ac2d5

  • SHA512

    55fd41562f5b245564520c48747e6bfddfe85e043f788a7d7ca494a6e33406cec4ffe47ce63a1d8f08e17d0297e9efbd0d05f06c57c744be0c2d47970d90ec06

  • SSDEEP

    12288:g72bntEDs72bntEDI472bntEDs72bntEDISD:g72zms72zmh72zms72zmx

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b7ea5d88eea4a87ac850b243528cccdb60d7cc2825bbfa219c669a930c9ac2d5

    • Size

      702KB

    • MD5

      710267f20a06c598f14834f26d9d16ca

    • SHA1

      5779354fa15dd9b2aa687899dc5948a8236af085

    • SHA256

      b7ea5d88eea4a87ac850b243528cccdb60d7cc2825bbfa219c669a930c9ac2d5

    • SHA512

      55fd41562f5b245564520c48747e6bfddfe85e043f788a7d7ca494a6e33406cec4ffe47ce63a1d8f08e17d0297e9efbd0d05f06c57c744be0c2d47970d90ec06

    • SSDEEP

      12288:g72bntEDs72bntEDI472bntEDs72bntEDISD:g72zms72zmh72zms72zmx

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks