Overview

overview

10

Static

static

8836eb3714...3d.exe

windows7-x64

10

8836eb3714...3d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8836eb371425c8a72a84bda7ae853576d54f8c072153c1337a075d1e6c49ce3d

  • Size

    272KB

  • Sample

    221205-21z26sfb77

  • MD5

    06124c9d81600c62e03f7ec07a5752f1

  • SHA1

    a8f5371f4bb25d8345595f44d0372611abc5a701

  • SHA256

    8836eb371425c8a72a84bda7ae853576d54f8c072153c1337a075d1e6c49ce3d

  • SHA512

    e34263cb6a8299f1823952ae4d83758302f631700dd05ca65c07bc867e8c5d6192e56761f0465db9fb7f642341645c332dfb67bfd2681543bbdfea9f19a93760

  • SSDEEP

    3072:zyY+mN+L1fyLFxoMzQw4I5coBBBT+42uxcYxGw4aqosAm+wG:GYpN2IfBTAut4aqosAm+w

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8836eb371425c8a72a84bda7ae853576d54f8c072153c1337a075d1e6c49ce3d

    • Size

      272KB

    • MD5

      06124c9d81600c62e03f7ec07a5752f1

    • SHA1

      a8f5371f4bb25d8345595f44d0372611abc5a701

    • SHA256

      8836eb371425c8a72a84bda7ae853576d54f8c072153c1337a075d1e6c49ce3d

    • SHA512

      e34263cb6a8299f1823952ae4d83758302f631700dd05ca65c07bc867e8c5d6192e56761f0465db9fb7f642341645c332dfb67bfd2681543bbdfea9f19a93760

    • SSDEEP

      3072:zyY+mN+L1fyLFxoMzQw4I5coBBBT+42uxcYxGw4aqosAm+wG:GYpN2IfBTAut4aqosAm+w

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks