Overview

overview

10

Static

static

083568f7ef...32.exe

windows7-x64

10

083568f7ef...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    083568f7ef360d17f9b96a8bf61ce49c11f6517100fc992b08c1f0e066315432

  • Size

    224KB

  • Sample

    221206-rg7b2aec25

  • MD5

    502945c9aedae3bf0e449c7165fddba5

  • SHA1

    f668239c235df7d42ef94bc434746df663c27520

  • SHA256

    083568f7ef360d17f9b96a8bf61ce49c11f6517100fc992b08c1f0e066315432

  • SHA512

    6891270eb69cbd6f547ab2ee0908d6a3cfbe8fc498cf4957e76d8adc6d5ca8d6421106cc9756b1615a87584c087f45f9da7e57fa179dd06afd785d0c9668f0c0

  • SSDEEP

    3072:CXyqNsMoBuUZVpl2mclbj4Uvx+8ysNOu+2eRcKksU61JkkX39RLrw4ySKUbax2+l:dqN5Qp4LnbmlrZW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      083568f7ef360d17f9b96a8bf61ce49c11f6517100fc992b08c1f0e066315432

    • Size

      224KB

    • MD5

      502945c9aedae3bf0e449c7165fddba5

    • SHA1

      f668239c235df7d42ef94bc434746df663c27520

    • SHA256

      083568f7ef360d17f9b96a8bf61ce49c11f6517100fc992b08c1f0e066315432

    • SHA512

      6891270eb69cbd6f547ab2ee0908d6a3cfbe8fc498cf4957e76d8adc6d5ca8d6421106cc9756b1615a87584c087f45f9da7e57fa179dd06afd785d0c9668f0c0

    • SSDEEP

      3072:CXyqNsMoBuUZVpl2mclbj4Uvx+8ysNOu+2eRcKksU61JkkX39RLrw4ySKUbax2+l:dqN5Qp4LnbmlrZW

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks