Overview

overview

10

Static

static

a09705869d...05.exe

windows7-x64

10

a09705869d...05.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a09705869d467b8d5d31d07d52fdc5cc89202320e1971d121f8893a9bfad9405

  • Size

    336KB

  • Sample

    221205-lmwvlafh37

  • MD5

    df06fd3b91036ecfb992dfa92a026558

  • SHA1

    0477fe60f7afb4dc59fc8f46bccf0e4c2be6cdf2

  • SHA256

    a09705869d467b8d5d31d07d52fdc5cc89202320e1971d121f8893a9bfad9405

  • SHA512

    167ef9db45f1d254e14464e259fe8a2cdfccde2ca35f1ba17e84aad0a538a0e6fc2dc72330cf388de4cdb23e580f259bdb5445c9340eaaeb1650078921c799d5

  • SSDEEP

    6144:/DNxwg02WGk1Y3nmQcuyKx5DKEJrwavj9+dU5SFd:bO2WGk1Y3nmQcjKvWEJQ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a09705869d467b8d5d31d07d52fdc5cc89202320e1971d121f8893a9bfad9405

    • Size

      336KB

    • MD5

      df06fd3b91036ecfb992dfa92a026558

    • SHA1

      0477fe60f7afb4dc59fc8f46bccf0e4c2be6cdf2

    • SHA256

      a09705869d467b8d5d31d07d52fdc5cc89202320e1971d121f8893a9bfad9405

    • SHA512

      167ef9db45f1d254e14464e259fe8a2cdfccde2ca35f1ba17e84aad0a538a0e6fc2dc72330cf388de4cdb23e580f259bdb5445c9340eaaeb1650078921c799d5

    • SSDEEP

      6144:/DNxwg02WGk1Y3nmQcuyKx5DKEJrwavj9+dU5SFd:bO2WGk1Y3nmQcjKvWEJQ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks