Overview

overview

10

Static

static

74832d7b67...56.exe

windows7-x64

10

74832d7b67...56.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    74832d7b67ab54e9e0c06563b1605c8ebf25b06d544e16f29ba6f8e1404c8856

  • Size

    100KB

  • Sample

    221205-y6c8tada38

  • MD5

    529815b650c71382c6396bc9080756ff

  • SHA1

    8354fe9686624bc6783c89bde6b3447668c72472

  • SHA256

    74832d7b67ab54e9e0c06563b1605c8ebf25b06d544e16f29ba6f8e1404c8856

  • SHA512

    c7d241573d86b12c97c4ea8b69b605b2c25a635043495cefd1d3dbcdb38693d05d6181a2e1b4c90a7fcc8dc8300c98c4fcab95db8c0554120942ccdbfd16ec4d

  • SSDEEP

    1536:vTt0u82NTdwYLGZcYADZPU1+73BD88b0ny5NIjni:Bw/gZPUQJ5Cni

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      74832d7b67ab54e9e0c06563b1605c8ebf25b06d544e16f29ba6f8e1404c8856

    • Size

      100KB

    • MD5

      529815b650c71382c6396bc9080756ff

    • SHA1

      8354fe9686624bc6783c89bde6b3447668c72472

    • SHA256

      74832d7b67ab54e9e0c06563b1605c8ebf25b06d544e16f29ba6f8e1404c8856

    • SHA512

      c7d241573d86b12c97c4ea8b69b605b2c25a635043495cefd1d3dbcdb38693d05d6181a2e1b4c90a7fcc8dc8300c98c4fcab95db8c0554120942ccdbfd16ec4d

    • SSDEEP

      1536:vTt0u82NTdwYLGZcYADZPU1+73BD88b0ny5NIjni:Bw/gZPUQJ5Cni

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks