Overview

overview

10

Static

static

899c5edb4f...2f.exe

windows7-x64

10

899c5edb4f...2f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    899c5edb4f1e63a7ee8e030d9ec96763f0a043e4dfb894062e3ae9a44360352f

  • Size

    284KB

  • Sample

    221207-dqyvcsdb8s

  • MD5

    01809b7bd4462349fcaa665f704a56c0

  • SHA1

    00bf3afd518ed789ca9758bcf13f00a77b050c5b

  • SHA256

    899c5edb4f1e63a7ee8e030d9ec96763f0a043e4dfb894062e3ae9a44360352f

  • SHA512

    bf5ab1cafadeac8e166de029643c74eadebecf8320be21940fb68b29a11aa127b3bc9cc6008b3b14b31fc1961f3aa8a5cc0938da5661a43a32acbc5bbbb55812

  • SSDEEP

    6144:tsYd3FRINO5WcBzjkBP18yAYU7vKd3EUXWidJhKnvmb7/D26XgZKIQ0OfsJy2DJs:td3fINO5WcBzjkV183Kd3EUXWidJhKnc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      899c5edb4f1e63a7ee8e030d9ec96763f0a043e4dfb894062e3ae9a44360352f

    • Size

      284KB

    • MD5

      01809b7bd4462349fcaa665f704a56c0

    • SHA1

      00bf3afd518ed789ca9758bcf13f00a77b050c5b

    • SHA256

      899c5edb4f1e63a7ee8e030d9ec96763f0a043e4dfb894062e3ae9a44360352f

    • SHA512

      bf5ab1cafadeac8e166de029643c74eadebecf8320be21940fb68b29a11aa127b3bc9cc6008b3b14b31fc1961f3aa8a5cc0938da5661a43a32acbc5bbbb55812

    • SSDEEP

      6144:tsYd3FRINO5WcBzjkBP18yAYU7vKd3EUXWidJhKnvmb7/D26XgZKIQ0OfsJy2DJs:td3fINO5WcBzjkV183Kd3EUXWidJhKnc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks