Overview

overview

10

Static

static

6c21562a9c...2e.exe

windows7-x64

10

6c21562a9c...2e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6c21562a9c7377639f7661592fcc2e2f39022d6d34cc870ef7b7af7b12f9b62e

  • Size

    96KB

  • Sample

    221205-mzd1zsga8t

  • MD5

    0a0208e9f567d86bc03b6b84f731efac

  • SHA1

    1dc7fcf3640be75c287835a7286f5f54ad773b44

  • SHA256

    6c21562a9c7377639f7661592fcc2e2f39022d6d34cc870ef7b7af7b12f9b62e

  • SHA512

    d2b5359483c715c39ebb2badd4adf0ec4596b44d6259d18c14082669cdd7efd515907e9425a51054e349b60c9b6dbaa0f280711294258bf1681d8aec2a9429f2

  • SSDEEP

    1536:VTQBHaf6cO/hMkGulSc16l6u+NMMl/KlYv1Tq5ThFKNIj/:8Zhdlu8CFFKC/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6c21562a9c7377639f7661592fcc2e2f39022d6d34cc870ef7b7af7b12f9b62e

    • Size

      96KB

    • MD5

      0a0208e9f567d86bc03b6b84f731efac

    • SHA1

      1dc7fcf3640be75c287835a7286f5f54ad773b44

    • SHA256

      6c21562a9c7377639f7661592fcc2e2f39022d6d34cc870ef7b7af7b12f9b62e

    • SHA512

      d2b5359483c715c39ebb2badd4adf0ec4596b44d6259d18c14082669cdd7efd515907e9425a51054e349b60c9b6dbaa0f280711294258bf1681d8aec2a9429f2

    • SSDEEP

      1536:VTQBHaf6cO/hMkGulSc16l6u+NMMl/KlYv1Tq5ThFKNIj/:8Zhdlu8CFFKC/

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks