Overview

overview

10

Static

static

80fd40c896...31.exe

windows7-x64

10

80fd40c896...31.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    80fd40c896984d9a7e191e4fac8f4cbe4448adac330354aa0171fa8d79a79531

  • Size

    88KB

  • Sample

    221205-ltgdgsge29

  • MD5

    edd48150effb01f06b025c28d341e0f9

  • SHA1

    cd2049b7652d61a80d4d5165636d3ca51baf4ddb

  • SHA256

    80fd40c896984d9a7e191e4fac8f4cbe4448adac330354aa0171fa8d79a79531

  • SHA512

    b63bb744c5a7226881bde69bc80572f7a7e38367d6186d4d6969721317d89c894d3d328922bcff92b313a5666c0f4801b6c682bc77e45996201cb98924361a9b

  • SSDEEP

    1536:URdqeR6g7LWnICOqubruocTzFJ0T72VpBOf3zXf:C6dIVqRBTzFJ0T72NOrXf

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      80fd40c896984d9a7e191e4fac8f4cbe4448adac330354aa0171fa8d79a79531

    • Size

      88KB

    • MD5

      edd48150effb01f06b025c28d341e0f9

    • SHA1

      cd2049b7652d61a80d4d5165636d3ca51baf4ddb

    • SHA256

      80fd40c896984d9a7e191e4fac8f4cbe4448adac330354aa0171fa8d79a79531

    • SHA512

      b63bb744c5a7226881bde69bc80572f7a7e38367d6186d4d6969721317d89c894d3d328922bcff92b313a5666c0f4801b6c682bc77e45996201cb98924361a9b

    • SSDEEP

      1536:URdqeR6g7LWnICOqubruocTzFJ0T72VpBOf3zXf:C6dIVqRBTzFJ0T72NOrXf

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks