Overview

overview

10

Static

static

2de5b5a81a...d5.exe

windows7-x64

10

2de5b5a81a...d5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2de5b5a81a8bf1b61309a37c46dc99a6ac9cbe1274ea8960424bed24a7a39fd5

  • Size

    187KB

  • Sample

    221205-sqmjnafa5z

  • MD5

    7ca3e9f3261abea3f96862964f4b700c

  • SHA1

    be69caf10a63f04285126cdcb443513c16134877

  • SHA256

    2de5b5a81a8bf1b61309a37c46dc99a6ac9cbe1274ea8960424bed24a7a39fd5

  • SHA512

    e2ce5ed623909948bb61f2a153878e7c39e135982743f093ff73bf8b91e6f9c907f23e9f5f023fca7589c84dac722293b7f33aec567a2c9a7c2a33951b2a3a0d

  • SSDEEP

    3072:sahF1FSUt6X7+BUlxpQHXgsFYx+ewNArVQ7k9aG4pH7NvpOzl6pp9SgXWEZu+YPZ:saH1Frt66yA3XCwNAyk9TY7NvpOBW3+r

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      2de5b5a81a8bf1b61309a37c46dc99a6ac9cbe1274ea8960424bed24a7a39fd5

    • Size

      187KB

    • MD5

      7ca3e9f3261abea3f96862964f4b700c

    • SHA1

      be69caf10a63f04285126cdcb443513c16134877

    • SHA256

      2de5b5a81a8bf1b61309a37c46dc99a6ac9cbe1274ea8960424bed24a7a39fd5

    • SHA512

      e2ce5ed623909948bb61f2a153878e7c39e135982743f093ff73bf8b91e6f9c907f23e9f5f023fca7589c84dac722293b7f33aec567a2c9a7c2a33951b2a3a0d

    • SSDEEP

      3072:sahF1FSUt6X7+BUlxpQHXgsFYx+ewNArVQ7k9aG4pH7NvpOzl6pp9SgXWEZu+YPZ:saH1Frt66yA3XCwNAyk9TY7NvpOBW3+r

    Score
    10/10
    evasionpersistencetrojan

    • UAC bypass

      evasiontrojan

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks