Overview

overview

10

Static

static

a25b0302ea...48.exe

windows7-x64

10

a25b0302ea...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a25b0302ea5ad28f61a2af8d4deb4f9638fe1570052eee191fdd695da7fc0048

  • Size

    156KB

  • Sample

    221205-l4vzmadc51

  • MD5

    b71556d10a83e5cf5465c24f2f6ea227

  • SHA1

    a7afd982790a3a83d1810895af1d8e2f5045890b

  • SHA256

    a25b0302ea5ad28f61a2af8d4deb4f9638fe1570052eee191fdd695da7fc0048

  • SHA512

    e01b13410e695dc9b5278513dde8dd61a41156eb584f31e449f745c5d66d32f87b17e0a77a03531d5a58a969e8a6dad0845b188cc4885f7931da6c17c17ca2b3

  • SSDEEP

    1536:MGan4ngzp0B8yNuRe305Xrud5N9jRMmBUKH7zD87/u+JcBqVbv1BsbhbEle+RReZ:iogexufubFKVXcBqB1BGSjNX

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a25b0302ea5ad28f61a2af8d4deb4f9638fe1570052eee191fdd695da7fc0048

    • Size

      156KB

    • MD5

      b71556d10a83e5cf5465c24f2f6ea227

    • SHA1

      a7afd982790a3a83d1810895af1d8e2f5045890b

    • SHA256

      a25b0302ea5ad28f61a2af8d4deb4f9638fe1570052eee191fdd695da7fc0048

    • SHA512

      e01b13410e695dc9b5278513dde8dd61a41156eb584f31e449f745c5d66d32f87b17e0a77a03531d5a58a969e8a6dad0845b188cc4885f7931da6c17c17ca2b3

    • SSDEEP

      1536:MGan4ngzp0B8yNuRe305Xrud5N9jRMmBUKH7zD87/u+JcBqVbv1BsbhbEle+RReZ:iogexufubFKVXcBqB1BGSjNX

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks