Overview

overview

10

Static

static

bf9007b1de...62.exe

windows7-x64

10

bf9007b1de...62.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bf9007b1def82c1d5b6059c8ec2f69475cf57469e33b9a36d91380bd5469d162

  • Size

    272KB

  • Sample

    221205-ldws8sfa54

  • MD5

    b30a5b12eee48114b4854145e608e058

  • SHA1

    3abaa12013bf16a3aaaae8e0f8734e645d8c58e0

  • SHA256

    bf9007b1def82c1d5b6059c8ec2f69475cf57469e33b9a36d91380bd5469d162

  • SHA512

    ead31541dc681b497e0418bc9a28bcd387ca3c19c09a37e176ef9825976e39ea0eea025052d1d93ae6e68bd501636c25303e49260e9ceb36f24c54cdcee720e4

  • SSDEEP

    6144:P3aZlQxchRdjLmtrBuMrdekUH63u+X5sc57W:CMxGLTuPL5

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      bf9007b1def82c1d5b6059c8ec2f69475cf57469e33b9a36d91380bd5469d162

    • Size

      272KB

    • MD5

      b30a5b12eee48114b4854145e608e058

    • SHA1

      3abaa12013bf16a3aaaae8e0f8734e645d8c58e0

    • SHA256

      bf9007b1def82c1d5b6059c8ec2f69475cf57469e33b9a36d91380bd5469d162

    • SHA512

      ead31541dc681b497e0418bc9a28bcd387ca3c19c09a37e176ef9825976e39ea0eea025052d1d93ae6e68bd501636c25303e49260e9ceb36f24c54cdcee720e4

    • SSDEEP

      6144:P3aZlQxchRdjLmtrBuMrdekUH63u+X5sc57W:CMxGLTuPL5

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks