Overview

overview

10

Static

static

d8c83863f1...90.exe

windows7-x64

10

d8c83863f1...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d8c83863f12c9470ca1fbff6ba7ee4eda80bf45b80980c0561522aae8e3ffa90

  • Size

    96KB

  • Sample

    221205-l54yxshf43

  • MD5

    0ead782b38538ac87118e08645845d39

  • SHA1

    1d5741c84b5692db84d6e9d4c19fe3f008234095

  • SHA256

    d8c83863f12c9470ca1fbff6ba7ee4eda80bf45b80980c0561522aae8e3ffa90

  • SHA512

    b178ca183853daaafba2322d3d03d36a10414801b970156eada71b632fa0085eb6ea885ba171b66a8c6e603919a6b3b58bf8465a30c931ee025b1e27339d143f

  • SSDEEP

    1536:fCJEg52W9tyVQO8P8ychnYwjj3RJNEo/knRzdnynE7RldNEP8lijOevNIjnZZ:fiE/Welychn1zR3Ek65RldqvCnH

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d8c83863f12c9470ca1fbff6ba7ee4eda80bf45b80980c0561522aae8e3ffa90

    • Size

      96KB

    • MD5

      0ead782b38538ac87118e08645845d39

    • SHA1

      1d5741c84b5692db84d6e9d4c19fe3f008234095

    • SHA256

      d8c83863f12c9470ca1fbff6ba7ee4eda80bf45b80980c0561522aae8e3ffa90

    • SHA512

      b178ca183853daaafba2322d3d03d36a10414801b970156eada71b632fa0085eb6ea885ba171b66a8c6e603919a6b3b58bf8465a30c931ee025b1e27339d143f

    • SSDEEP

      1536:fCJEg52W9tyVQO8P8ychnYwjj3RJNEo/knRzdnynE7RldNEP8lijOevNIjnZZ:fiE/Welychn1zR3Ek65RldqvCnH

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks