Overview

overview

10

Static

static

0ccc294770...a6.exe

windows7-x64

10

0ccc294770...a6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ccc29477082e1360dff2adc43cd51576f5842335e8dc169189c1a1e91adfda6

  • Size

    260KB

  • Sample

    221207-d24jzsbe87

  • MD5

    62ee7a970c7ee887ee52f81c4f3cc288

  • SHA1

    3efe1c556fb39035f51db800d189707a46f8ecc1

  • SHA256

    0ccc29477082e1360dff2adc43cd51576f5842335e8dc169189c1a1e91adfda6

  • SHA512

    abe519881639f8faffa77805e08ae03d09184be3f6eeffe76193ef304f7dc8791ecc6c64632c60c6f80fa6752f5e95305eae77ee1e9e259ce35cbf670cfa390d

  • SSDEEP

    3072:tqeQZJ3mSo5eg5kZcLSg797VWa4ipZHIfe6rdedUyZpiQ/VzEff7S5DW2hRKL:tGmbJ97npJL6gOyfdzEff7SQP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0ccc29477082e1360dff2adc43cd51576f5842335e8dc169189c1a1e91adfda6

    • Size

      260KB

    • MD5

      62ee7a970c7ee887ee52f81c4f3cc288

    • SHA1

      3efe1c556fb39035f51db800d189707a46f8ecc1

    • SHA256

      0ccc29477082e1360dff2adc43cd51576f5842335e8dc169189c1a1e91adfda6

    • SHA512

      abe519881639f8faffa77805e08ae03d09184be3f6eeffe76193ef304f7dc8791ecc6c64632c60c6f80fa6752f5e95305eae77ee1e9e259ce35cbf670cfa390d

    • SSDEEP

      3072:tqeQZJ3mSo5eg5kZcLSg797VWa4ipZHIfe6rdedUyZpiQ/VzEff7S5DW2hRKL:tGmbJ97npJL6gOyfdzEff7SQP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks