Overview

overview

10

Static

static

3

022e716862...b8.exe

windows7-x64

10

022e716862...b8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    022e71686224da861ba81730c15ef2b8

  • Size

    236KB

  • Sample

    231224-r68amahgfk

  • MD5

    022e71686224da861ba81730c15ef2b8

  • SHA1

    7e548b7d86d51ecdd07a9947bece222893592843

  • SHA256

    34e595b83b7bb8cb87366da963513f3fab248e366174a0753d55f126c08e6e58

  • SHA512

    712eaaaed70e0beb90ef4e4ce1dc30bb4e830caf2585d4242aa8ba0f9edee2080496821c43a226dab0887d802e8511be3a49889634a5624a7fe618202cae3db9

  • SSDEEP

    3072:D6VlhsJ0JsvyMZeIT51B8u0gWCyiHCUPqgxh:dSJuyMwItf8u0gWCyiHCm

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      022e71686224da861ba81730c15ef2b8

    • Size

      236KB

    • MD5

      022e71686224da861ba81730c15ef2b8

    • SHA1

      7e548b7d86d51ecdd07a9947bece222893592843

    • SHA256

      34e595b83b7bb8cb87366da963513f3fab248e366174a0753d55f126c08e6e58

    • SHA512

      712eaaaed70e0beb90ef4e4ce1dc30bb4e830caf2585d4242aa8ba0f9edee2080496821c43a226dab0887d802e8511be3a49889634a5624a7fe618202cae3db9

    • SSDEEP

      3072:D6VlhsJ0JsvyMZeIT51B8u0gWCyiHCUPqgxh:dSJuyMwItf8u0gWCyiHCm

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks