Overview

overview

10

Static

static

d1accb360b...d7.exe

windows7-x64

10

d1accb360b...d7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1accb360b390fa5c5b080e33123c4908b4ecabdba1707165e35004396bb91d7

  • Size

    96KB

  • Sample

    221205-xmm38sff77

  • MD5

    fc62a5537a04b7aa38bc73298822eb55

  • SHA1

    093d1933ce278499c73ba839742c9bda6ea87d23

  • SHA256

    d1accb360b390fa5c5b080e33123c4908b4ecabdba1707165e35004396bb91d7

  • SHA512

    4eaca5b74caf2a93d0c9829c03d00550c27d899eb4929bdae23da93688931c000f7dc1447c4f40c7a32b752b06d926bad0247ea634d900c9bbf2b02ac06375d6

  • SSDEEP

    1536:HUl4JxmnWWrL7Qe25xjlU47I0m93i6E2i:U4JxnWC5xjlr7I1i

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d1accb360b390fa5c5b080e33123c4908b4ecabdba1707165e35004396bb91d7

    • Size

      96KB

    • MD5

      fc62a5537a04b7aa38bc73298822eb55

    • SHA1

      093d1933ce278499c73ba839742c9bda6ea87d23

    • SHA256

      d1accb360b390fa5c5b080e33123c4908b4ecabdba1707165e35004396bb91d7

    • SHA512

      4eaca5b74caf2a93d0c9829c03d00550c27d899eb4929bdae23da93688931c000f7dc1447c4f40c7a32b752b06d926bad0247ea634d900c9bbf2b02ac06375d6

    • SSDEEP

      1536:HUl4JxmnWWrL7Qe25xjlU47I0m93i6E2i:U4JxnWC5xjlr7I1i

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks