Overview

overview

10

Static

static

7429c36316...3f.exe

windows7-x64

10

7429c36316...3f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7429c36316e81fcaceebcb47b1c5b3992a96663fe4b114d3985cfc795243123f

  • Size

    224KB

  • Sample

    221207-d3tq6sbf42

  • MD5

    4fe1f1138fdc471c216d35637b0ea34b

  • SHA1

    86c65afebb646c7cf31743f8d22b413a9ca1d168

  • SHA256

    7429c36316e81fcaceebcb47b1c5b3992a96663fe4b114d3985cfc795243123f

  • SHA512

    146021c851837e7063481ccb4a23405e13b5260e2a323635c690c67bf1190d860fb774194d7fc286f2bb46c86e213b9b17fae67e03e57a63e543f1e321d85091

  • SSDEEP

    3072:sRJQvGkLNzq4ZA4j88xrqzojYvebJNCpdAI9mifH6x0cdnO4:sRIGSs4K4j88xrqzKYmXCDjfHu0M

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7429c36316e81fcaceebcb47b1c5b3992a96663fe4b114d3985cfc795243123f

    • Size

      224KB

    • MD5

      4fe1f1138fdc471c216d35637b0ea34b

    • SHA1

      86c65afebb646c7cf31743f8d22b413a9ca1d168

    • SHA256

      7429c36316e81fcaceebcb47b1c5b3992a96663fe4b114d3985cfc795243123f

    • SHA512

      146021c851837e7063481ccb4a23405e13b5260e2a323635c690c67bf1190d860fb774194d7fc286f2bb46c86e213b9b17fae67e03e57a63e543f1e321d85091

    • SSDEEP

      3072:sRJQvGkLNzq4ZA4j88xrqzojYvebJNCpdAI9mifH6x0cdnO4:sRIGSs4K4j88xrqzKYmXCDjfHu0M

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks