Overview

overview

10

Static

static

e45e550451...11.exe

windows7-x64

10

e45e550451...11.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e45e550451a598647036ba1cfdcd1e1709cff9d5e843b005647596442e573611

  • Size

    200KB

  • Sample

    221207-d5d4haec8t

  • MD5

    328c788f2bea5a05ee2c0365c2e399bd

  • SHA1

    669843950c63a458081e5639a41120b4a60430b7

  • SHA256

    e45e550451a598647036ba1cfdcd1e1709cff9d5e843b005647596442e573611

  • SHA512

    25f06e31103a388cd525fb24022766921469457cbcd396010397cd0b279f2e22624571e974d026663e205bd077676ca784f05bd61c15fab8e40ab6cd3ab66654

  • SSDEEP

    6144:Zm719spWymPBeaSAOJ+7xi5eRed63qaCR8nIBK5:kHILmPBeaSAOJ+7xi5eRed63qaCE

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e45e550451a598647036ba1cfdcd1e1709cff9d5e843b005647596442e573611

    • Size

      200KB

    • MD5

      328c788f2bea5a05ee2c0365c2e399bd

    • SHA1

      669843950c63a458081e5639a41120b4a60430b7

    • SHA256

      e45e550451a598647036ba1cfdcd1e1709cff9d5e843b005647596442e573611

    • SHA512

      25f06e31103a388cd525fb24022766921469457cbcd396010397cd0b279f2e22624571e974d026663e205bd077676ca784f05bd61c15fab8e40ab6cd3ab66654

    • SSDEEP

      6144:Zm719spWymPBeaSAOJ+7xi5eRed63qaCR8nIBK5:kHILmPBeaSAOJ+7xi5eRed63qaCE

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks