Overview

overview

10

Static

static

8c115bbcac...8e.exe

windows7-x64

10

8c115bbcac...8e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c115bbcac8b2fec69915901d2703df8bd456a3d3ca6f638298faa0bd9aa298e

  • Size

    224KB

  • Sample

    221205-3rp2aahc38

  • MD5

    f5920a85765d5435dd351aa11d15ead3

  • SHA1

    cfd3fcabd73a06aeca25ea032e35cae8427e9c86

  • SHA256

    8c115bbcac8b2fec69915901d2703df8bd456a3d3ca6f638298faa0bd9aa298e

  • SHA512

    93ec0688ff02a867e6846d4acc0f63840757c9ce5bae329fa577361e7a09fbf0980b92d88662badedff220c6dea76384d767925578093c4659bed4ee9f428f41

  • SSDEEP

    6144:DfZmBULmk3Uv5KKN0HOO6NYUzASgodcZ0TCxenNLpuScVdDvM:DfcBUuYIAN0TkeNLpTYDU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8c115bbcac8b2fec69915901d2703df8bd456a3d3ca6f638298faa0bd9aa298e

    • Size

      224KB

    • MD5

      f5920a85765d5435dd351aa11d15ead3

    • SHA1

      cfd3fcabd73a06aeca25ea032e35cae8427e9c86

    • SHA256

      8c115bbcac8b2fec69915901d2703df8bd456a3d3ca6f638298faa0bd9aa298e

    • SHA512

      93ec0688ff02a867e6846d4acc0f63840757c9ce5bae329fa577361e7a09fbf0980b92d88662badedff220c6dea76384d767925578093c4659bed4ee9f428f41

    • SSDEEP

      6144:DfZmBULmk3Uv5KKN0HOO6NYUzASgodcZ0TCxenNLpuScVdDvM:DfcBUuYIAN0TkeNLpTYDU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks