Overview

overview

10

Static

static

8a5bb26cc5...e8.exe

windows7-x64

10

8a5bb26cc5...e8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8a5bb26cc5fc1d7d63a393c0036adbcdcd3fe131ef2e1020f62400e1e86980e8

  • Size

    88KB

  • Sample

    221205-28fcqsae4y

  • MD5

    01589c079299bcfd0ed4b7d1822818cf

  • SHA1

    cc947854589117d3181bfa4fdee91c97e11e1ef7

  • SHA256

    8a5bb26cc5fc1d7d63a393c0036adbcdcd3fe131ef2e1020f62400e1e86980e8

  • SHA512

    7cd03170b737ca01d63967be126a00f174b70990f14673483d8cf9f43a308885209450f1d583dcb6c37d37b84948d5890e8063bb9ff49bb457da80a300cc4629

  • SSDEEP

    1536:tBTwkNv2rlFEJ71b2gYmHVwrESp3GV4VE:/TjGiJ71bBu3G

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8a5bb26cc5fc1d7d63a393c0036adbcdcd3fe131ef2e1020f62400e1e86980e8

    • Size

      88KB

    • MD5

      01589c079299bcfd0ed4b7d1822818cf

    • SHA1

      cc947854589117d3181bfa4fdee91c97e11e1ef7

    • SHA256

      8a5bb26cc5fc1d7d63a393c0036adbcdcd3fe131ef2e1020f62400e1e86980e8

    • SHA512

      7cd03170b737ca01d63967be126a00f174b70990f14673483d8cf9f43a308885209450f1d583dcb6c37d37b84948d5890e8063bb9ff49bb457da80a300cc4629

    • SSDEEP

      1536:tBTwkNv2rlFEJ71b2gYmHVwrESp3GV4VE:/TjGiJ71bBu3G

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks