Overview

overview

10

Static

static

a0dc1e113a...70.exe

windows7-x64

10

a0dc1e113a...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0dc1e113a9464d709e4ba1af742a27c214a93f3a90262ad5d73078f34d7cf70

  • Size

    100KB

  • Sample

    221205-xk88paae5t

  • MD5

    3dc3f1078180d0b9f1312b858509d336

  • SHA1

    73fb804224f45c8251b3dbc6a57b7f6087b27b21

  • SHA256

    a0dc1e113a9464d709e4ba1af742a27c214a93f3a90262ad5d73078f34d7cf70

  • SHA512

    b54296c6853e10865bdbfa25f4a8e0a7f7309d031f3fc576abdd33f25d53003628fe7a76942c1899f618d1673788e7a5a64844201beb38f7a02a398a544883e9

  • SSDEEP

    1536:RUWqcX220mQUxJKIRGWcOUP7vXArnY1ZqAefzyeshNIjnZB:SuQHNAfzyemCnD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a0dc1e113a9464d709e4ba1af742a27c214a93f3a90262ad5d73078f34d7cf70

    • Size

      100KB

    • MD5

      3dc3f1078180d0b9f1312b858509d336

    • SHA1

      73fb804224f45c8251b3dbc6a57b7f6087b27b21

    • SHA256

      a0dc1e113a9464d709e4ba1af742a27c214a93f3a90262ad5d73078f34d7cf70

    • SHA512

      b54296c6853e10865bdbfa25f4a8e0a7f7309d031f3fc576abdd33f25d53003628fe7a76942c1899f618d1673788e7a5a64844201beb38f7a02a398a544883e9

    • SSDEEP

      1536:RUWqcX220mQUxJKIRGWcOUP7vXArnY1ZqAefzyeshNIjnZB:SuQHNAfzyemCnD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks