Overview

overview

10

Static

static

deadd5e4d1...9f.exe

windows7-x64

10

deadd5e4d1...9f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    deadd5e4d198362aa346cf29e7b6a29ee770494ce2bb90034ef048a9f7447e9f

  • Size

    156KB

  • Sample

    221205-3fpw5sbc2t

  • MD5

    f2543d355cb4ccb901419d3f0e1534a1

  • SHA1

    dce32328a02f5b7a207804ff0eda31567d2d064b

  • SHA256

    deadd5e4d198362aa346cf29e7b6a29ee770494ce2bb90034ef048a9f7447e9f

  • SHA512

    2e7e91a7cf817bdbd7c3b4d82a2f0bf99944ce967940bd53592dcdee4ebb5fd7b449625808fc23d2423947a08a040f9f2be448f1a36febf96549cfb8cf84b6e5

  • SSDEEP

    3072:65BMPJ4T2vaHfQmuKM7U6L9sxsHrl3B0mhQjUqvG44oQZiEwj:iBy4Sva/QVK+SxsHrl3B0mhPq+cWO

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      deadd5e4d198362aa346cf29e7b6a29ee770494ce2bb90034ef048a9f7447e9f

    • Size

      156KB

    • MD5

      f2543d355cb4ccb901419d3f0e1534a1

    • SHA1

      dce32328a02f5b7a207804ff0eda31567d2d064b

    • SHA256

      deadd5e4d198362aa346cf29e7b6a29ee770494ce2bb90034ef048a9f7447e9f

    • SHA512

      2e7e91a7cf817bdbd7c3b4d82a2f0bf99944ce967940bd53592dcdee4ebb5fd7b449625808fc23d2423947a08a040f9f2be448f1a36febf96549cfb8cf84b6e5

    • SSDEEP

      3072:65BMPJ4T2vaHfQmuKM7U6L9sxsHrl3B0mhQjUqvG44oQZiEwj:iBy4Sva/QVK+SxsHrl3B0mhPq+cWO

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks