Overview

overview

10

Static

static

c46a82dde1...67.exe

windows7-x64

10

c46a82dde1...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c46a82dde1c74f6050d3a1e5010d91c2635365ceed0562d3b55fca3126efaa67

  • Size

    236KB

  • Sample

    221205-mjvnssah92

  • MD5

    5924f559c1eeae3d51db9defc440132b

  • SHA1

    73dd288f62b098ab4b11e3bd678115d96c44b65a

  • SHA256

    c46a82dde1c74f6050d3a1e5010d91c2635365ceed0562d3b55fca3126efaa67

  • SHA512

    28beb3fad7842c32eee168345b015b3574ec73012ca23bc936e3b5c990358b4bb636e2511c887bd8b8968efb093baa53d12eb8dd00a9f7339122b13efd04f05c

  • SSDEEP

    6144:ImaKCiUNxlBDe2WmHioZW+ZigxpEJAYyXSWIc9sKB+:PkLlBDeLmHioZWEigxpYAYlbc9TB

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c46a82dde1c74f6050d3a1e5010d91c2635365ceed0562d3b55fca3126efaa67

    • Size

      236KB

    • MD5

      5924f559c1eeae3d51db9defc440132b

    • SHA1

      73dd288f62b098ab4b11e3bd678115d96c44b65a

    • SHA256

      c46a82dde1c74f6050d3a1e5010d91c2635365ceed0562d3b55fca3126efaa67

    • SHA512

      28beb3fad7842c32eee168345b015b3574ec73012ca23bc936e3b5c990358b4bb636e2511c887bd8b8968efb093baa53d12eb8dd00a9f7339122b13efd04f05c

    • SSDEEP

      6144:ImaKCiUNxlBDe2WmHioZW+ZigxpEJAYyXSWIc9sKB+:PkLlBDeLmHioZWEigxpYAYlbc9TB

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks