Overview

overview

10

Static

static

3

1329231c93...ad.exe

windows7-x64

10

1329231c93...ad.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1329231c9313dfd0ed04086b277453ad

  • Size

    88KB

  • Sample

    231224-1d86wshbe3

  • MD5

    1329231c9313dfd0ed04086b277453ad

  • SHA1

    14beefe91c8174969b941ee12dd29cbeda03a4cb

  • SHA256

    98ddea0288e82d715f9e9b92b7a8a2393396c80a3738216090c7bec5bd662dd4

  • SHA512

    8f11ea85444844a1ebcabd08b9a8022e0b37555c96dd43922281afdb79db72f6376d7fbdfd996b8ba3fd4616f2bdaad5d39275ed611b59782a5e6b7900cc916b

  • SSDEEP

    1536:IjybbSpy8tXG06YpqdXTsYJ/F+FBFIFGFYF7DUZxTZbma:tSs0G0mZyv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1329231c9313dfd0ed04086b277453ad

    • Size

      88KB

    • MD5

      1329231c9313dfd0ed04086b277453ad

    • SHA1

      14beefe91c8174969b941ee12dd29cbeda03a4cb

    • SHA256

      98ddea0288e82d715f9e9b92b7a8a2393396c80a3738216090c7bec5bd662dd4

    • SHA512

      8f11ea85444844a1ebcabd08b9a8022e0b37555c96dd43922281afdb79db72f6376d7fbdfd996b8ba3fd4616f2bdaad5d39275ed611b59782a5e6b7900cc916b

    • SSDEEP

      1536:IjybbSpy8tXG06YpqdXTsYJ/F+FBFIFGFYF7DUZxTZbma:tSs0G0mZyv

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks