Overview

overview

10

Static

static

af19151669...0f.exe

windows7-x64

10

af19151669...0f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    af19151669764ccf81c138fa1fcd111f8d802a5205dc55ee8ca28824ba499a0f

  • Size

    216KB

  • Sample

    221205-l4khwsdc4v

  • MD5

    58ee9ad69a2526710ca380d49855a943

  • SHA1

    035af4ea16bb107d3a139bcc943599b12d2dd381

  • SHA256

    af19151669764ccf81c138fa1fcd111f8d802a5205dc55ee8ca28824ba499a0f

  • SHA512

    ab2916dec14ce816c7edc273e79b2391671080f7f175e317cc6fd05aac1f5f90dff2ec68dea99fa364a057ae31a7eb26ffb021fa3d4d9f7a2c904873a076a221

  • SSDEEP

    3072:eyEJuu3uXu+ho96wDO1kg3QHOtEOYXsjUj:T7hmnD0kd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      af19151669764ccf81c138fa1fcd111f8d802a5205dc55ee8ca28824ba499a0f

    • Size

      216KB

    • MD5

      58ee9ad69a2526710ca380d49855a943

    • SHA1

      035af4ea16bb107d3a139bcc943599b12d2dd381

    • SHA256

      af19151669764ccf81c138fa1fcd111f8d802a5205dc55ee8ca28824ba499a0f

    • SHA512

      ab2916dec14ce816c7edc273e79b2391671080f7f175e317cc6fd05aac1f5f90dff2ec68dea99fa364a057ae31a7eb26ffb021fa3d4d9f7a2c904873a076a221

    • SSDEEP

      3072:eyEJuu3uXu+ho96wDO1kg3QHOtEOYXsjUj:T7hmnD0kd

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks