Overview

overview

10

Static

static

c07d379cb8...0b.exe

windows7-x64

10

c07d379cb8...0b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c07d379cb81a79754825df564683356960ba2206e6478067a935a1a47935760b

  • Size

    132KB

  • Sample

    221205-3r3x5sca8w

  • MD5

    dc20855cf8c7ffff215be9f32b12052d

  • SHA1

    8d303e0f36a232078ceeb328adef95fc49232ca3

  • SHA256

    c07d379cb81a79754825df564683356960ba2206e6478067a935a1a47935760b

  • SHA512

    bd491e7a3f635809af97090cd272e9e1440bb2608ea2a50718c517b544348f8da8e93df8f0e0a3dad3f5e1b860221fb3075657b3152476a6f2410dfc8e4a3500

  • SSDEEP

    3072:fL3gqEBNBGh3Gix5CJIldRonVI0mgn0W4zuby:fUqEBzGhWiDCDVI0mgnzk

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c07d379cb81a79754825df564683356960ba2206e6478067a935a1a47935760b

    • Size

      132KB

    • MD5

      dc20855cf8c7ffff215be9f32b12052d

    • SHA1

      8d303e0f36a232078ceeb328adef95fc49232ca3

    • SHA256

      c07d379cb81a79754825df564683356960ba2206e6478067a935a1a47935760b

    • SHA512

      bd491e7a3f635809af97090cd272e9e1440bb2608ea2a50718c517b544348f8da8e93df8f0e0a3dad3f5e1b860221fb3075657b3152476a6f2410dfc8e4a3500

    • SSDEEP

      3072:fL3gqEBNBGh3Gix5CJIldRonVI0mgn0W4zuby:fUqEBzGhWiDCDVI0mgnzk

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks