Overview

overview

10

Static

static

dd944ecadb...64.exe

windows7-x64

10

dd944ecadb...64.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd944ecadba2279247ecdf3f3f7d3c43b5dbaeeeca5f848ed532cb393d155a64

  • Size

    250KB

  • Sample

    221207-c1ry5aag9x

  • MD5

    9ffaa35ff8a8aabc20d369e2a4493c7d

  • SHA1

    54e9474cdd530e428da28c19f96d9c59d71bb009

  • SHA256

    dd944ecadba2279247ecdf3f3f7d3c43b5dbaeeeca5f848ed532cb393d155a64

  • SHA512

    849270295fcb64e771bee807092405ace5321ff401b79a9bdf52ffc19cc506e34a6083797217a489c368d5b997bc1dc4a6a80302ae429604bae17b2a1d1bdf27

  • SSDEEP

    3072:p788E5EEVWiJAKMN9DAXamLKAcfbKyZwP02bVq3NZMf:pW5uKMN9DtAcfbK/qT

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      dd944ecadba2279247ecdf3f3f7d3c43b5dbaeeeca5f848ed532cb393d155a64

    • Size

      250KB

    • MD5

      9ffaa35ff8a8aabc20d369e2a4493c7d

    • SHA1

      54e9474cdd530e428da28c19f96d9c59d71bb009

    • SHA256

      dd944ecadba2279247ecdf3f3f7d3c43b5dbaeeeca5f848ed532cb393d155a64

    • SHA512

      849270295fcb64e771bee807092405ace5321ff401b79a9bdf52ffc19cc506e34a6083797217a489c368d5b997bc1dc4a6a80302ae429604bae17b2a1d1bdf27

    • SSDEEP

      3072:p788E5EEVWiJAKMN9DAXamLKAcfbKyZwP02bVq3NZMf:pW5uKMN9DtAcfbK/qT

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks