Overview

overview

10

Static

static

aa73077867...7a.exe

windows7-x64

10

aa73077867...7a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa73077867a4fe1baaec4fbeb54066d997108a35296581cd49f4d0878d64377a

  • Size

    228KB

  • Sample

    221205-xjl2rsfc93

  • MD5

    ab1318b9417086c140970a34df089783

  • SHA1

    c45a561e37d0dd2a80f090bc2083e5d0b27c885d

  • SHA256

    aa73077867a4fe1baaec4fbeb54066d997108a35296581cd49f4d0878d64377a

  • SHA512

    8abfaa3f72bf2f44c4f0cdb8836124262d221d3c5d0c830f506836dcaca0f9040eb2d97f942164a0016974c4bb41c1a871ebe4cb333a260f7d10916b77390cc4

  • SSDEEP

    6144:FK5H3dwqsNy5ibpNjl4EqxF6snji81RUinKICl:Q5XdQxl

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      aa73077867a4fe1baaec4fbeb54066d997108a35296581cd49f4d0878d64377a

    • Size

      228KB

    • MD5

      ab1318b9417086c140970a34df089783

    • SHA1

      c45a561e37d0dd2a80f090bc2083e5d0b27c885d

    • SHA256

      aa73077867a4fe1baaec4fbeb54066d997108a35296581cd49f4d0878d64377a

    • SHA512

      8abfaa3f72bf2f44c4f0cdb8836124262d221d3c5d0c830f506836dcaca0f9040eb2d97f942164a0016974c4bb41c1a871ebe4cb333a260f7d10916b77390cc4

    • SSDEEP

      6144:FK5H3dwqsNy5ibpNjl4EqxF6snji81RUinKICl:Q5XdQxl

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks