Overview

overview

10

Static

static

a69e13cc22...5e.exe

windows7-x64

10

a69e13cc22...5e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a69e13cc220d30dca1f9ddaa0a0c249bafc159ca31587b57a1c13c322a27fa5e

  • Size

    180KB

  • Sample

    221206-rwycnsae4s

  • MD5

    3f7dc213556da201828c388eb749ca51

  • SHA1

    6e7e7001bd98a2f4ee1e7ac5a24e77578b3fe40c

  • SHA256

    a69e13cc220d30dca1f9ddaa0a0c249bafc159ca31587b57a1c13c322a27fa5e

  • SHA512

    fd19dc8ac6e21605e37fb3badb50f4cd2828e8a74a062d9420151f72a25885e3c78986e0197cfbd25ba009732a3441b8d80d9435adba84d4ef8e05e47c646acf

  • SSDEEP

    3072:nFKm+1MlttMFz8o+F334VSlkfoyHYb/zCHPEhg5JN8x+eDfcAuQOUSYrulF0:nFc1MltKaJkHHYb/zCHPEhg5JN8x+eDh

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a69e13cc220d30dca1f9ddaa0a0c249bafc159ca31587b57a1c13c322a27fa5e

    • Size

      180KB

    • MD5

      3f7dc213556da201828c388eb749ca51

    • SHA1

      6e7e7001bd98a2f4ee1e7ac5a24e77578b3fe40c

    • SHA256

      a69e13cc220d30dca1f9ddaa0a0c249bafc159ca31587b57a1c13c322a27fa5e

    • SHA512

      fd19dc8ac6e21605e37fb3badb50f4cd2828e8a74a062d9420151f72a25885e3c78986e0197cfbd25ba009732a3441b8d80d9435adba84d4ef8e05e47c646acf

    • SSDEEP

      3072:nFKm+1MlttMFz8o+F334VSlkfoyHYb/zCHPEhg5JN8x+eDfcAuQOUSYrulF0:nFc1MltKaJkHHYb/zCHPEhg5JN8x+eDh

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks