Overview

overview

10

Static

static

aa91ec1cb7...02.exe

windows7-x64

10

aa91ec1cb7...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa91ec1cb736e13344f97751c4566d3d17b8c449e5877f51bf07a0ab92daca02

  • Size

    156KB

  • Sample

    221206-wv15dsed9x

  • MD5

    83dff9135ef3c793b2f6c170b2c46937

  • SHA1

    d34c5efc61547948c7caa8a05fb422d1d56bb041

  • SHA256

    aa91ec1cb736e13344f97751c4566d3d17b8c449e5877f51bf07a0ab92daca02

  • SHA512

    f0b188742cd28610943daba6a4ab54e9a01dbf5a68824e61711bfdce9f73feb5e2aece252f16eb945dff2e05a202d44398427d6bcc3e7cd05eaab540e74a29c1

  • SSDEEP

    3072:mnoxLFxOpMS7yJuu4TrVlpT3rZy93E3ipMdIyH+Y8DuA2IXTg4oQZiEn6:JxNfJuu4l3rZy93UipMd9+Y8DuYAWw

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      aa91ec1cb736e13344f97751c4566d3d17b8c449e5877f51bf07a0ab92daca02

    • Size

      156KB

    • MD5

      83dff9135ef3c793b2f6c170b2c46937

    • SHA1

      d34c5efc61547948c7caa8a05fb422d1d56bb041

    • SHA256

      aa91ec1cb736e13344f97751c4566d3d17b8c449e5877f51bf07a0ab92daca02

    • SHA512

      f0b188742cd28610943daba6a4ab54e9a01dbf5a68824e61711bfdce9f73feb5e2aece252f16eb945dff2e05a202d44398427d6bcc3e7cd05eaab540e74a29c1

    • SSDEEP

      3072:mnoxLFxOpMS7yJuu4TrVlpT3rZy93E3ipMdIyH+Y8DuA2IXTg4oQZiEn6:JxNfJuu4l3rZy93UipMd9+Y8DuYAWw

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks