Overview

overview

10

Static

static

838069b543...75.exe

windows7-x64

10

838069b543...75.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    838069b543d378fd68ee868727c9dd1e5476ae7fe8114edf92b11784b1719f75

  • Size

    132KB

  • Sample

    221205-yklcasag84

  • MD5

    61b437298deea0a9252fd6082e36ff7a

  • SHA1

    2dbc862579d43713ac1f0b3086fee836a9b489d0

  • SHA256

    838069b543d378fd68ee868727c9dd1e5476ae7fe8114edf92b11784b1719f75

  • SHA512

    f19d718862a3e73fd2c71c75dda4e0b400e8cc679129d835d3fd72ea8fa4b454035597cf6007f546fdc4e4a73431535ae5478827fde2967b4306960410e1741d

  • SSDEEP

    3072:43k/ZPrdVfWM8RM/8KmwBErXXFefQmD8ampjMiW2:n/tX8/KmwBEjXFeos8aCAiL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      838069b543d378fd68ee868727c9dd1e5476ae7fe8114edf92b11784b1719f75

    • Size

      132KB

    • MD5

      61b437298deea0a9252fd6082e36ff7a

    • SHA1

      2dbc862579d43713ac1f0b3086fee836a9b489d0

    • SHA256

      838069b543d378fd68ee868727c9dd1e5476ae7fe8114edf92b11784b1719f75

    • SHA512

      f19d718862a3e73fd2c71c75dda4e0b400e8cc679129d835d3fd72ea8fa4b454035597cf6007f546fdc4e4a73431535ae5478827fde2967b4306960410e1741d

    • SSDEEP

      3072:43k/ZPrdVfWM8RM/8KmwBErXXFefQmD8ampjMiW2:n/tX8/KmwBEjXFeos8aCAiL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks