Overview

overview

10

Static

static

9e57c02d8d...39.exe

windows7-x64

10

9e57c02d8d...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e57c02d8d1f8214740f745ef4cd1ac0663c2ebf4a9268091d96b89fe1f8d939

  • Size

    204KB

  • Sample

    221205-2x4wyshf5w

  • MD5

    57d2915df7ebfdd1ea1bddb2e32d167d

  • SHA1

    3c7866e33c9e55a62ec00ffda1961f0c9f954349

  • SHA256

    9e57c02d8d1f8214740f745ef4cd1ac0663c2ebf4a9268091d96b89fe1f8d939

  • SHA512

    1773dcce7a8bb29db323024ee0d8199c04b91394797bcedfa55ac25226395f1728121cac572944f0b9f5dd20a5cd98997d5ab9ed944f34263213839f511f054c

  • SSDEEP

    3072:7RjB6ueSoQC6bFTpHlgrcDMbPn6h0ervzZdQW:91nblvzZd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9e57c02d8d1f8214740f745ef4cd1ac0663c2ebf4a9268091d96b89fe1f8d939

    • Size

      204KB

    • MD5

      57d2915df7ebfdd1ea1bddb2e32d167d

    • SHA1

      3c7866e33c9e55a62ec00ffda1961f0c9f954349

    • SHA256

      9e57c02d8d1f8214740f745ef4cd1ac0663c2ebf4a9268091d96b89fe1f8d939

    • SHA512

      1773dcce7a8bb29db323024ee0d8199c04b91394797bcedfa55ac25226395f1728121cac572944f0b9f5dd20a5cd98997d5ab9ed944f34263213839f511f054c

    • SSDEEP

      3072:7RjB6ueSoQC6bFTpHlgrcDMbPn6h0ervzZdQW:91nblvzZd

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks