Overview

overview

10

Static

static

cbad0679fc...96.exe

windows7-x64

10

cbad0679fc...96.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cbad0679fc6a6f63723560095372ed68eb0522b424456a6d4342c167ae04c896

  • Size

    152KB

  • Sample

    221205-la724aeg33

  • MD5

    dcc08a1d81f0976491d34427f0eb5824

  • SHA1

    fea5854bdf0fed102f32d2197f0fafc65867c9a9

  • SHA256

    cbad0679fc6a6f63723560095372ed68eb0522b424456a6d4342c167ae04c896

  • SHA512

    fc3bd3c45f93b297b0bff309ddfe07584e13995f3bb1145ff448fe42ceee0fa6850488abf301b1edc1358d1a47ea20942a72c34857ee3673899381fbcbdbac91

  • SSDEEP

    3072:QmlcPTYhjIu+7MxJUbaxI3zQyzLBuT+u3:j+7Mxa0yzE

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      cbad0679fc6a6f63723560095372ed68eb0522b424456a6d4342c167ae04c896

    • Size

      152KB

    • MD5

      dcc08a1d81f0976491d34427f0eb5824

    • SHA1

      fea5854bdf0fed102f32d2197f0fafc65867c9a9

    • SHA256

      cbad0679fc6a6f63723560095372ed68eb0522b424456a6d4342c167ae04c896

    • SHA512

      fc3bd3c45f93b297b0bff309ddfe07584e13995f3bb1145ff448fe42ceee0fa6850488abf301b1edc1358d1a47ea20942a72c34857ee3673899381fbcbdbac91

    • SSDEEP

      3072:QmlcPTYhjIu+7MxJUbaxI3zQyzLBuT+u3:j+7Mxa0yzE

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks