Overview

overview

10

Static

static

e9157b50cd...4e.exe

windows7-x64

10

e9157b50cd...4e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9157b50cd83e0380f9be33a82401d144bee34f9204c21b6e60f92579f3ca24e

  • Size

    348KB

  • Sample

    221205-2lpynagf6z

  • MD5

    38a10e3ed3bd3e13c6dea59f3e7dbeac

  • SHA1

    98a84961f64b45fcaa4d7b5cb9e48498cb77fa85

  • SHA256

    e9157b50cd83e0380f9be33a82401d144bee34f9204c21b6e60f92579f3ca24e

  • SHA512

    ef13c20d10bcec81d20512cd7d5e74ef13c9f78c46d8cb52da535aa7c9c43f959d5f7011c9ade5cc89f5bd706fb5a1e5b57a42b727eee37155ec3954a19b781f

  • SSDEEP

    3072:rYwVdKONISknKKZH8dC7YJwZqIXrDEc87jsMuQWkJUvFpiRRS8R3y5oZ7W1XQeF4:rfkh4dyDu

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e9157b50cd83e0380f9be33a82401d144bee34f9204c21b6e60f92579f3ca24e

    • Size

      348KB

    • MD5

      38a10e3ed3bd3e13c6dea59f3e7dbeac

    • SHA1

      98a84961f64b45fcaa4d7b5cb9e48498cb77fa85

    • SHA256

      e9157b50cd83e0380f9be33a82401d144bee34f9204c21b6e60f92579f3ca24e

    • SHA512

      ef13c20d10bcec81d20512cd7d5e74ef13c9f78c46d8cb52da535aa7c9c43f959d5f7011c9ade5cc89f5bd706fb5a1e5b57a42b727eee37155ec3954a19b781f

    • SSDEEP

      3072:rYwVdKONISknKKZH8dC7YJwZqIXrDEc87jsMuQWkJUvFpiRRS8R3y5oZ7W1XQeF4:rfkh4dyDu

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks