Overview

overview

10

Static

static

cb9d75450c...88.exe

windows7-x64

10

cb9d75450c...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb9d75450cb56a8edac9fa1bf5fbfab9157452838322a9724c0574258969f188

  • Size

    228KB

  • Sample

    221205-xjgr2sad2v

  • MD5

    dc06aac5a1526bac3df5e19d35d8372e

  • SHA1

    b7239cec67a63195de9dfbbf8163f3eef95a0c2c

  • SHA256

    cb9d75450cb56a8edac9fa1bf5fbfab9157452838322a9724c0574258969f188

  • SHA512

    541929606651a22db659dfdd8da516342993c5bc59065dce632ee3b024aec47f4f2b278989c275cf21777f6e4f64a050b7452da25c4d7a5b2094240076eab81c

  • SSDEEP

    6144:6KhR3dwqsNy5ibpNjl4EqxF6snji81RUinKIC4:/hddQxl4

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      cb9d75450cb56a8edac9fa1bf5fbfab9157452838322a9724c0574258969f188

    • Size

      228KB

    • MD5

      dc06aac5a1526bac3df5e19d35d8372e

    • SHA1

      b7239cec67a63195de9dfbbf8163f3eef95a0c2c

    • SHA256

      cb9d75450cb56a8edac9fa1bf5fbfab9157452838322a9724c0574258969f188

    • SHA512

      541929606651a22db659dfdd8da516342993c5bc59065dce632ee3b024aec47f4f2b278989c275cf21777f6e4f64a050b7452da25c4d7a5b2094240076eab81c

    • SSDEEP

      6144:6KhR3dwqsNy5ibpNjl4EqxF6snji81RUinKIC4:/hddQxl4

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks