Overview

overview

8

Static

static

ad107df79f...da.exe

windows7-x64

8

ad107df79f...da.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad107df79ff0f32a25ffaae6cb3561ad0becb6607e11dcd2a7c199a7fef153da

  • Size

    273KB

  • Sample

    221205-q3tsdsab5v

  • MD5

    0cce532e234e980666db7ac207677b99

  • SHA1

    877550b13b48343d9fa2023243af998cf6554715

  • SHA256

    ad107df79ff0f32a25ffaae6cb3561ad0becb6607e11dcd2a7c199a7fef153da

  • SHA512

    619316062c077c9bbcbb96742364f6fa7445a3027f7a05c75558a96e7d589199a7d4829a24fe90169d4bfccce51967d8f9e3d8c9e87e6a2f923cea4732a2556b

  • SSDEEP

    6144:9MhiBs/ijJhu4Ab4CPfNjJjmQcYKxvpoyqMfz5Ak:9MhiBs/Ouh/x4LqMrn

Score
8/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      ad107df79ff0f32a25ffaae6cb3561ad0becb6607e11dcd2a7c199a7fef153da

    • Size

      273KB

    • MD5

      0cce532e234e980666db7ac207677b99

    • SHA1

      877550b13b48343d9fa2023243af998cf6554715

    • SHA256

      ad107df79ff0f32a25ffaae6cb3561ad0becb6607e11dcd2a7c199a7fef153da

    • SHA512

      619316062c077c9bbcbb96742364f6fa7445a3027f7a05c75558a96e7d589199a7d4829a24fe90169d4bfccce51967d8f9e3d8c9e87e6a2f923cea4732a2556b

    • SSDEEP

      6144:9MhiBs/ijJhu4Ab4CPfNjJjmQcYKxvpoyqMfz5Ak:9MhiBs/Ouh/x4LqMrn

    Score
    8/10
    evasionpersistencetrojan

    • Creates new service(s)

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks