Overview

overview

10

Static

static

f26262b018...df.exe

windows7-x64

10

f26262b018...df.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f26262b0189356cf0f212d317686bd37659db9bd3f7838caa487c0bb527506df

  • Size

    296KB

  • Sample

    221205-k7hm2aac21

  • MD5

    2c96852a6d1acd9fc1043711dc3d4372

  • SHA1

    92a3dfd79a3c931a8e3a67d032d7bac7b6c5b75e

  • SHA256

    f26262b0189356cf0f212d317686bd37659db9bd3f7838caa487c0bb527506df

  • SHA512

    cf377fbb85ff8b8acc848bfc162b0af1fba430cce84923f60ef9650d6d12b5f63bd25d5752ef78fc152a45febb4b635051a5390406279e4fb9200fcbe98e9e51

  • SSDEEP

    6144:szaKkrONaJ2BHzDtU7b5dU14Uf797SNIbVRGAw2+8e9KZPY88NH:szQrO2CzqX5dS7cuDGH2+8xm88V

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f26262b0189356cf0f212d317686bd37659db9bd3f7838caa487c0bb527506df

    • Size

      296KB

    • MD5

      2c96852a6d1acd9fc1043711dc3d4372

    • SHA1

      92a3dfd79a3c931a8e3a67d032d7bac7b6c5b75e

    • SHA256

      f26262b0189356cf0f212d317686bd37659db9bd3f7838caa487c0bb527506df

    • SHA512

      cf377fbb85ff8b8acc848bfc162b0af1fba430cce84923f60ef9650d6d12b5f63bd25d5752ef78fc152a45febb4b635051a5390406279e4fb9200fcbe98e9e51

    • SSDEEP

      6144:szaKkrONaJ2BHzDtU7b5dU14Uf797SNIbVRGAw2+8e9KZPY88NH:szQrO2CzqX5dS7cuDGH2+8xm88V

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks