Overview

overview

10

Static

static

0beabdd25f...d6.exe

windows7-x64

10

0beabdd25f...d6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0beabdd25fcc4c7d3c18ac512dd1f66d6c807095f35a98532d444df2b88ab6d6

  • Size

    292KB

  • Sample

    221207-dsjs8adc8x

  • MD5

    1c6fd3a1c39f1d7f3f5c0a53de018799

  • SHA1

    078fce51bdfe6db0a8933030f9ce20bd63221029

  • SHA256

    0beabdd25fcc4c7d3c18ac512dd1f66d6c807095f35a98532d444df2b88ab6d6

  • SHA512

    264627e6aedc3e8bde127aa7b79fe8256bf07ed30ffb146ce978b7143caff00bd8a041e96a1f7853260bca379334f73043d77bd9ebc8ea7786794ec456fdfb78

  • SSDEEP

    3072:injOd4A9dikAOBq7CFLuupaFBzxk7c7awSZohDnjV2S8NmMx3WarRDSXzsUiztpY:i+i6Luupszxk7USZoDnp23xmg9zUuti

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0beabdd25fcc4c7d3c18ac512dd1f66d6c807095f35a98532d444df2b88ab6d6

    • Size

      292KB

    • MD5

      1c6fd3a1c39f1d7f3f5c0a53de018799

    • SHA1

      078fce51bdfe6db0a8933030f9ce20bd63221029

    • SHA256

      0beabdd25fcc4c7d3c18ac512dd1f66d6c807095f35a98532d444df2b88ab6d6

    • SHA512

      264627e6aedc3e8bde127aa7b79fe8256bf07ed30ffb146ce978b7143caff00bd8a041e96a1f7853260bca379334f73043d77bd9ebc8ea7786794ec456fdfb78

    • SSDEEP

      3072:injOd4A9dikAOBq7CFLuupaFBzxk7c7awSZohDnjV2S8NmMx3WarRDSXzsUiztpY:i+i6Luupszxk7USZoDnp23xmg9zUuti

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks