Overview

overview

10

Static

static

eda1d778fc...66.exe

windows7-x64

10

eda1d778fc...66.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eda1d778fca1e8fc44e7592aaa2765464fc2ac1ef93a7a7ff01e1df56cfda166

  • Size

    296KB

  • Sample

    221205-k7tejaed33

  • MD5

    836e9412baea00c513b08d3e432255df

  • SHA1

    303f51dae2de516668c60822954f2e3e962c3a18

  • SHA256

    eda1d778fca1e8fc44e7592aaa2765464fc2ac1ef93a7a7ff01e1df56cfda166

  • SHA512

    d549357e49c0e6312b139ed063661efab1d56d9dbbe7cf553b886d777705ee7124c8a3d842f19ddd40fd5369023b9b98c4dfa2e1651e194ab4f6518ca20f2495

  • SSDEEP

    3072:nKYmnFCMIJqOifVqfk8xfu3YOUtCPgCr0bM2C2VxZx89bRsVM8fnkTgFGrgtpTxK:nK1giQG0s0bM2CEDV+8fnkWtEU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      eda1d778fca1e8fc44e7592aaa2765464fc2ac1ef93a7a7ff01e1df56cfda166

    • Size

      296KB

    • MD5

      836e9412baea00c513b08d3e432255df

    • SHA1

      303f51dae2de516668c60822954f2e3e962c3a18

    • SHA256

      eda1d778fca1e8fc44e7592aaa2765464fc2ac1ef93a7a7ff01e1df56cfda166

    • SHA512

      d549357e49c0e6312b139ed063661efab1d56d9dbbe7cf553b886d777705ee7124c8a3d842f19ddd40fd5369023b9b98c4dfa2e1651e194ab4f6518ca20f2495

    • SSDEEP

      3072:nKYmnFCMIJqOifVqfk8xfu3YOUtCPgCr0bM2C2VxZx89bRsVM8fnkTgFGrgtpTxK:nK1giQG0s0bM2CEDV+8fnkWtEU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks