Overview

overview

10

Static

static

83af34225c...d9.exe

windows7-x64

10

83af34225c...d9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    83af34225c3ba28c4244b26c624ef78783c2b3c17b877cdba1a0877a457572d9

  • Size

    408KB

  • Sample

    221207-dkd8rscf5w

  • MD5

    86f73acc2fa2460a3bd6da924f93d8ed

  • SHA1

    620b940aab608049bcc5825f4d7a212aecae5d6b

  • SHA256

    83af34225c3ba28c4244b26c624ef78783c2b3c17b877cdba1a0877a457572d9

  • SHA512

    7dcab52fd5126b336adbb65d30d0afb89080db40f21c89cd7cc624ad94c36c4c8c7a2c9c70bcdcbfb0b1d10847e27145e1e1f9594a9782f137d6990e7331b70e

  • SSDEEP

    6144:WzY8umZ9rKpYdGizwhGt7k9dcKCdEkR2OAkmQxkpnUMgpmDJOGExOfKdLK/P2SQq:ut9+uukRX8WkpnUMuGExOfW+/P2SQ/C

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      83af34225c3ba28c4244b26c624ef78783c2b3c17b877cdba1a0877a457572d9

    • Size

      408KB

    • MD5

      86f73acc2fa2460a3bd6da924f93d8ed

    • SHA1

      620b940aab608049bcc5825f4d7a212aecae5d6b

    • SHA256

      83af34225c3ba28c4244b26c624ef78783c2b3c17b877cdba1a0877a457572d9

    • SHA512

      7dcab52fd5126b336adbb65d30d0afb89080db40f21c89cd7cc624ad94c36c4c8c7a2c9c70bcdcbfb0b1d10847e27145e1e1f9594a9782f137d6990e7331b70e

    • SSDEEP

      6144:WzY8umZ9rKpYdGizwhGt7k9dcKCdEkR2OAkmQxkpnUMgpmDJOGExOfKdLK/P2SQq:ut9+uukRX8WkpnUMuGExOfW+/P2SQ/C

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks