Overview

overview

10

Static

static

b719d0b65e...7f.exe

windows7-x64

10

b719d0b65e...7f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b719d0b65e992310ee42b1c8ff8d02c478e72b9975f43b0d4c82f3fd4c80187f

  • Size

    224KB

  • Sample

    221205-3h3k1sgf53

  • MD5

    86c4900b450871b349f730869a4a3ded

  • SHA1

    610f65bf2f4a7f6bfc9e03687b812bdf58a03b20

  • SHA256

    b719d0b65e992310ee42b1c8ff8d02c478e72b9975f43b0d4c82f3fd4c80187f

  • SHA512

    d952e33c653167726618a0009284c760b1251ff41a1c770f9a05f227ba09424ab6a5196795d729f87c3cbcaf4bd12c9710ec6c67a0976bffd79233e5381bc3fc

  • SSDEEP

    3072:RXyqNsMoBu2ZVpl2mclbj4Uvx+8ysNOu+2eRcKksU61JkkX39RLrw4ySKUbax2+l:gqN52p4LnbmlrZW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b719d0b65e992310ee42b1c8ff8d02c478e72b9975f43b0d4c82f3fd4c80187f

    • Size

      224KB

    • MD5

      86c4900b450871b349f730869a4a3ded

    • SHA1

      610f65bf2f4a7f6bfc9e03687b812bdf58a03b20

    • SHA256

      b719d0b65e992310ee42b1c8ff8d02c478e72b9975f43b0d4c82f3fd4c80187f

    • SHA512

      d952e33c653167726618a0009284c760b1251ff41a1c770f9a05f227ba09424ab6a5196795d729f87c3cbcaf4bd12c9710ec6c67a0976bffd79233e5381bc3fc

    • SSDEEP

      3072:RXyqNsMoBu2ZVpl2mclbj4Uvx+8ysNOu+2eRcKksU61JkkX39RLrw4ySKUbax2+l:gqN52p4LnbmlrZW

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks