Overview

overview

10

Static

static

3

6a6818667d...32.exe

windows7-x64

10

6a6818667d...32.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a6818667d08143a4b8df21a602fbec0_exe32.exe

  • Size

    244KB

  • Sample

    231015-yc1r1sdh93

  • MD5

    6a6818667d08143a4b8df21a602fbec0

  • SHA1

    3aa2028f165922bb4c3d2bea11d3a7ef63e95169

  • SHA256

    3400a277e229716db27dd07f1db978a03e0a9753c02e8201ba5b464212c30d2a

  • SHA512

    e199f355fd01da91705e62472cb8c14973040a376ea8a7a7cac05a993debb09bac7bc623315b8406ff3c08ff722165fa39fa02994f5aa9501d1cdb804c3df393

  • SSDEEP

    6144:ciQ+u5HAPkbZePJDmlI/+dfkIOwgccXYJcmI3cvHQOFZayUa/nM2:ciQ+u5HAPk9EUoYJcmym0

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6a6818667d08143a4b8df21a602fbec0_exe32.exe

    • Size

      244KB

    • MD5

      6a6818667d08143a4b8df21a602fbec0

    • SHA1

      3aa2028f165922bb4c3d2bea11d3a7ef63e95169

    • SHA256

      3400a277e229716db27dd07f1db978a03e0a9753c02e8201ba5b464212c30d2a

    • SHA512

      e199f355fd01da91705e62472cb8c14973040a376ea8a7a7cac05a993debb09bac7bc623315b8406ff3c08ff722165fa39fa02994f5aa9501d1cdb804c3df393

    • SSDEEP

      6144:ciQ+u5HAPkbZePJDmlI/+dfkIOwgccXYJcmI3cvHQOFZayUa/nM2:ciQ+u5HAPk9EUoYJcmym0

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks