Overview

overview

10

Static

static

a17ecda15d...60.exe

windows7-x64

10

a17ecda15d...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a17ecda15d9e2e08977a90087effd2f3bafa5d63b55f6fad01be82e5925c2f60

  • Size

    228KB

  • Sample

    221205-mf5dtsaf75

  • MD5

    3a53c72243eba7bf92e6a4432ccb6b98

  • SHA1

    cfbd9170b5030a69c52b6911b8f779ad79f2cd79

  • SHA256

    a17ecda15d9e2e08977a90087effd2f3bafa5d63b55f6fad01be82e5925c2f60

  • SHA512

    ad590b464f0629761acaa8bbb4f8a243287ac1523607036e7d267be9cc5248e4bb8c67a3565609f29c8ffb8c9fe4bd73167c7e23f8b617ead8631807001481e6

  • SSDEEP

    6144:rEO3PFKs7aaOKW8alhrEqxF6snji81RUinKGHgD7S7:rE8PhvENPH67q

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a17ecda15d9e2e08977a90087effd2f3bafa5d63b55f6fad01be82e5925c2f60

    • Size

      228KB

    • MD5

      3a53c72243eba7bf92e6a4432ccb6b98

    • SHA1

      cfbd9170b5030a69c52b6911b8f779ad79f2cd79

    • SHA256

      a17ecda15d9e2e08977a90087effd2f3bafa5d63b55f6fad01be82e5925c2f60

    • SHA512

      ad590b464f0629761acaa8bbb4f8a243287ac1523607036e7d267be9cc5248e4bb8c67a3565609f29c8ffb8c9fe4bd73167c7e23f8b617ead8631807001481e6

    • SSDEEP

      6144:rEO3PFKs7aaOKW8alhrEqxF6snji81RUinKGHgD7S7:rE8PhvENPH67q

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks