Overview

overview

10

Static

static

c00437cec6...28.exe

windows7-x64

10

c00437cec6...28.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c00437cec66509dc6beab49a7d1b395e0c133bd28f6c70d272c0afb6fd1d6028

  • Size

    84KB

  • Sample

    221207-d8ngcaef4s

  • MD5

    85777c79becd6e616e893abc01b2c8bc

  • SHA1

    528633bc05a4bec708ecceec5b9834f639ea90c6

  • SHA256

    c00437cec66509dc6beab49a7d1b395e0c133bd28f6c70d272c0afb6fd1d6028

  • SHA512

    0798227584a3e1a8c1c522426d43c584b125783cb2c30b40e20a56cf6877187cd8343c8477682a471f84313504366e1346d9dfb31bf06cfacafa2a5d1a0ce11b

  • SSDEEP

    768:0iJ88Z6TpnKT6EPjfJJxZOxyDOOSBoEGkeYq64wxiq7TgAy48CXwUcPDHr1rEQV:0RAOKT66jhJl7SkkeYL7Kd48CArrpr/V

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c00437cec66509dc6beab49a7d1b395e0c133bd28f6c70d272c0afb6fd1d6028

    • Size

      84KB

    • MD5

      85777c79becd6e616e893abc01b2c8bc

    • SHA1

      528633bc05a4bec708ecceec5b9834f639ea90c6

    • SHA256

      c00437cec66509dc6beab49a7d1b395e0c133bd28f6c70d272c0afb6fd1d6028

    • SHA512

      0798227584a3e1a8c1c522426d43c584b125783cb2c30b40e20a56cf6877187cd8343c8477682a471f84313504366e1346d9dfb31bf06cfacafa2a5d1a0ce11b

    • SSDEEP

      768:0iJ88Z6TpnKT6EPjfJJxZOxyDOOSBoEGkeYq64wxiq7TgAy48CXwUcPDHr1rEQV:0RAOKT66jhJl7SkkeYL7Kd48CArrpr/V

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks