Overview

overview

10

Static

static

81620651f2...bd.exe

windows7-x64

10

81620651f2...bd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81620651f204e6e637ab225dccf4c071677b7e8dc7752cab3021fbb613da38bd

  • Size

    236KB

  • Sample

    221205-ltdbtscc7y

  • MD5

    6e22a21cb4bcea2aad12241e8f66306f

  • SHA1

    1e99786e46e78a283a0322c304d83e57e093ac69

  • SHA256

    81620651f204e6e637ab225dccf4c071677b7e8dc7752cab3021fbb613da38bd

  • SHA512

    442e5b546c73518cfd943ffa5071d5902a0f221b84968b8f48aa0512559d36aa5980254123d0c12614a4772ad1182f2d63f315ccb70d8d233b9f9dd4f17a3707

  • SSDEEP

    6144:bJXpAjjLPqKGaLCUI989H79t5LqRPqTmc4t2GXh+juOTXFc:1XpAjjLPqKGaLCUI989H79t4lqV4tejQ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      81620651f204e6e637ab225dccf4c071677b7e8dc7752cab3021fbb613da38bd

    • Size

      236KB

    • MD5

      6e22a21cb4bcea2aad12241e8f66306f

    • SHA1

      1e99786e46e78a283a0322c304d83e57e093ac69

    • SHA256

      81620651f204e6e637ab225dccf4c071677b7e8dc7752cab3021fbb613da38bd

    • SHA512

      442e5b546c73518cfd943ffa5071d5902a0f221b84968b8f48aa0512559d36aa5980254123d0c12614a4772ad1182f2d63f315ccb70d8d233b9f9dd4f17a3707

    • SSDEEP

      6144:bJXpAjjLPqKGaLCUI989H79t5LqRPqTmc4t2GXh+juOTXFc:1XpAjjLPqKGaLCUI989H79t4lqV4tejQ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks