Overview

overview

10

Static

static

a1cd9010e8...b7.exe

windows7-x64

10

a1cd9010e8...b7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a1cd9010e85de20293dad619223da5e154b17648540a27eaa3019622fe19afb7

  • Size

    156KB

  • Sample

    221205-mb6fbsac44

  • MD5

    83ed53032add85071018f55ec6b626a6

  • SHA1

    78be8df33ab8c52416a36edce045163176f3cf30

  • SHA256

    a1cd9010e85de20293dad619223da5e154b17648540a27eaa3019622fe19afb7

  • SHA512

    34ab4f5c5ea8610e9f3d401b71e1e4427f32523e95cdb2d840d20746ac4d0ad71ae7c20f6e715014eedc3a1be0074c0a9fcef7b352db86ebdc6ead5c82823a33

  • SSDEEP

    3072:A0O2Paj5h3QKWXXWXG8FF7K+AmsgE5kEZZZy6x86dE5j4oQE:3ajX3QKKXWFFF7KlgaSJd1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a1cd9010e85de20293dad619223da5e154b17648540a27eaa3019622fe19afb7

    • Size

      156KB

    • MD5

      83ed53032add85071018f55ec6b626a6

    • SHA1

      78be8df33ab8c52416a36edce045163176f3cf30

    • SHA256

      a1cd9010e85de20293dad619223da5e154b17648540a27eaa3019622fe19afb7

    • SHA512

      34ab4f5c5ea8610e9f3d401b71e1e4427f32523e95cdb2d840d20746ac4d0ad71ae7c20f6e715014eedc3a1be0074c0a9fcef7b352db86ebdc6ead5c82823a33

    • SSDEEP

      3072:A0O2Paj5h3QKWXXWXG8FF7K+AmsgE5kEZZZy6x86dE5j4oQE:3ajX3QKKXWFFF7KlgaSJd1

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks