Overview

overview

10

Static

static

a267f61325...4d.exe

windows7-x64

10

a267f61325...4d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a267f61325451a0ac0dddd2146978d41cbf5a8acbbaa848a8f194aeb06497a4d

  • Size

    125KB

  • Sample

    221205-29gxysaf3v

  • MD5

    ea77662c1475536b21487a98911b7386

  • SHA1

    e2db6248d739320897f8cbb1146497817fea76ef

  • SHA256

    a267f61325451a0ac0dddd2146978d41cbf5a8acbbaa848a8f194aeb06497a4d

  • SHA512

    fe9022725abf0a863bb638e7f98feefb68d9b79e806b246e9dcdc3d379d17598c3eb6f8fec6cf84d4b56307a5f6d0ba4806a076f1e13969523a928045496d8f3

  • SSDEEP

    3072:MbapLDuLE2goAIl2EwrLSm5WLyD1v6jVAfunNg4K7QmcY+MZGQ:tpLDuLE2gRGoXr5Gyhv6jVAfKglLZG

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a267f61325451a0ac0dddd2146978d41cbf5a8acbbaa848a8f194aeb06497a4d

    • Size

      125KB

    • MD5

      ea77662c1475536b21487a98911b7386

    • SHA1

      e2db6248d739320897f8cbb1146497817fea76ef

    • SHA256

      a267f61325451a0ac0dddd2146978d41cbf5a8acbbaa848a8f194aeb06497a4d

    • SHA512

      fe9022725abf0a863bb638e7f98feefb68d9b79e806b246e9dcdc3d379d17598c3eb6f8fec6cf84d4b56307a5f6d0ba4806a076f1e13969523a928045496d8f3

    • SSDEEP

      3072:MbapLDuLE2goAIl2EwrLSm5WLyD1v6jVAfunNg4K7QmcY+MZGQ:tpLDuLE2gRGoXr5Gyhv6jVAfKglLZG

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks