Overview

overview

10

Static

static

b57a34395c...98.exe

windows7-x64

10

b57a34395c...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b57a34395c8785be58dd798d1cee317cd8f60034eeb0d2f6ae86b160782a3398

  • Size

    164KB

  • Sample

    221205-l9cp8shh99

  • MD5

    3d316ee3dbeb54e1336de2f3770863ff

  • SHA1

    056c04d3a6fc741d893e7f1a55f8154ea4f6f858

  • SHA256

    b57a34395c8785be58dd798d1cee317cd8f60034eeb0d2f6ae86b160782a3398

  • SHA512

    99d7b56716b1d98baabeb0de82af1b49f9cdb34f08081fab64dc8dadd4afbb94f261a1eb82abb0b026df2b00de205d231679e7d68b8856411062ab6e4c3966b0

  • SSDEEP

    3072:M7VzbhEbV93WZy844f6Gy6r7bkcsN2bqldN:M7obOQof6GB7bkjK8d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b57a34395c8785be58dd798d1cee317cd8f60034eeb0d2f6ae86b160782a3398

    • Size

      164KB

    • MD5

      3d316ee3dbeb54e1336de2f3770863ff

    • SHA1

      056c04d3a6fc741d893e7f1a55f8154ea4f6f858

    • SHA256

      b57a34395c8785be58dd798d1cee317cd8f60034eeb0d2f6ae86b160782a3398

    • SHA512

      99d7b56716b1d98baabeb0de82af1b49f9cdb34f08081fab64dc8dadd4afbb94f261a1eb82abb0b026df2b00de205d231679e7d68b8856411062ab6e4c3966b0

    • SSDEEP

      3072:M7VzbhEbV93WZy844f6Gy6r7bkcsN2bqldN:M7obOQof6GB7bkjK8d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks