Overview

overview

10

Static

static

d2e4686e24...f7.exe

windows7-x64

10

d2e4686e24...f7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d2e4686e240004a631857fcdfcb9fa4c9fef9dc652c584150bbb2f3ff0db2af7

  • Size

    132KB

  • Sample

    221205-3r3blsca8v

  • MD5

    bacdd3c08f1f6a9472593819c7ed7c67

  • SHA1

    c204dfac511d3333fb137bab1c61d8e898df8deb

  • SHA256

    d2e4686e240004a631857fcdfcb9fa4c9fef9dc652c584150bbb2f3ff0db2af7

  • SHA512

    08a577c5638bc617495374015d878ac57b1b82d349aba9cc2b79920467bc6a759704c0ed1e775d957507964be1cf8c558297c84cf6197633a233915a86f9eb17

  • SSDEEP

    3072:fL3zWqEBNBGh3Gix5CJIldRonVI0mgn0W4zubW:fHWqEBzGhWiDCDVI0mgnzk

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d2e4686e240004a631857fcdfcb9fa4c9fef9dc652c584150bbb2f3ff0db2af7

    • Size

      132KB

    • MD5

      bacdd3c08f1f6a9472593819c7ed7c67

    • SHA1

      c204dfac511d3333fb137bab1c61d8e898df8deb

    • SHA256

      d2e4686e240004a631857fcdfcb9fa4c9fef9dc652c584150bbb2f3ff0db2af7

    • SHA512

      08a577c5638bc617495374015d878ac57b1b82d349aba9cc2b79920467bc6a759704c0ed1e775d957507964be1cf8c558297c84cf6197633a233915a86f9eb17

    • SSDEEP

      3072:fL3zWqEBNBGh3Gix5CJIldRonVI0mgn0W4zubW:fHWqEBzGhWiDCDVI0mgnzk

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks