Overview

overview

10

Static

static

ce12171e17...39.exe

windows7-x64

10

ce12171e17...39.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ce12171e177a59e6ac79d79c598752715150b6b199c96e48bf52fefa5522ad39

  • Size

    336KB

  • Sample

    221205-xh46ysac81

  • MD5

    51fcb3aea597ad4ec4459b20d4664d8d

  • SHA1

    6f9c61155ca8823e62b102191ff61ca14398ac1d

  • SHA256

    ce12171e177a59e6ac79d79c598752715150b6b199c96e48bf52fefa5522ad39

  • SHA512

    d82eac9919f0c78c77735df294e412c7e625d2975de93e02c4805ba186bc60dc522679cc56bac4f7862462ee853daa73a8f6c0dda497e4d3bb418b69c750b3d5

  • SSDEEP

    6144:TANx472WGk1Y3nmQcuyKQ5DzEJewavj9+zU5S5Nn:k072WGk1Y3nmQcjKAPEJR5

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ce12171e177a59e6ac79d79c598752715150b6b199c96e48bf52fefa5522ad39

    • Size

      336KB

    • MD5

      51fcb3aea597ad4ec4459b20d4664d8d

    • SHA1

      6f9c61155ca8823e62b102191ff61ca14398ac1d

    • SHA256

      ce12171e177a59e6ac79d79c598752715150b6b199c96e48bf52fefa5522ad39

    • SHA512

      d82eac9919f0c78c77735df294e412c7e625d2975de93e02c4805ba186bc60dc522679cc56bac4f7862462ee853daa73a8f6c0dda497e4d3bb418b69c750b3d5

    • SSDEEP

      6144:TANx472WGk1Y3nmQcuyKQ5DzEJewavj9+zU5S5Nn:k072WGk1Y3nmQcjKAPEJR5

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks