Overview

overview

10

Static

static

9a1c22fa5f...4e.exe

windows7-x64

10

9a1c22fa5f...4e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a1c22fa5fc15436ffc21b85591391cf37d56ca917a3a7bd134ad9b77719014e

  • Size

    135KB

  • Sample

    221205-3zrj3shh92

  • MD5

    d9ffdf0599ade708deecc0e4dc5d7bf0

  • SHA1

    cccb5de36ba78d04848fef43943ee0677904f6ef

  • SHA256

    9a1c22fa5fc15436ffc21b85591391cf37d56ca917a3a7bd134ad9b77719014e

  • SHA512

    8db0024ff3133ff1b94a7553c3ef08cfd8263db1cd120dd7ad54d25b7d1d6618a8c6978490673f65a467744c64fa652aa9643d42c24b3eda6d0d4c165af71afc

  • SSDEEP

    3072:2JERzdiScc3VsweCeXRzeSeVeEe0eDQ8jrTr9:+ERw9c3VsZR3Q8jrTr

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9a1c22fa5fc15436ffc21b85591391cf37d56ca917a3a7bd134ad9b77719014e

    • Size

      135KB

    • MD5

      d9ffdf0599ade708deecc0e4dc5d7bf0

    • SHA1

      cccb5de36ba78d04848fef43943ee0677904f6ef

    • SHA256

      9a1c22fa5fc15436ffc21b85591391cf37d56ca917a3a7bd134ad9b77719014e

    • SHA512

      8db0024ff3133ff1b94a7553c3ef08cfd8263db1cd120dd7ad54d25b7d1d6618a8c6978490673f65a467744c64fa652aa9643d42c24b3eda6d0d4c165af71afc

    • SSDEEP

      3072:2JERzdiScc3VsweCeXRzeSeVeEe0eDQ8jrTr9:+ERw9c3VsZR3Q8jrTr

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks