Overview

overview

10

Static

static

3

014d60fd6d...dd.exe

windows7-x64

10

014d60fd6d...dd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    014d60fd6d7a984e50d543b60ad8dcdd

  • Size

    156KB

  • Sample

    231224-rxvyyafgbj

  • MD5

    014d60fd6d7a984e50d543b60ad8dcdd

  • SHA1

    6e3b90b5cd6d54d7f291e806cc88a2308a11f90e

  • SHA256

    6e29d20929bfd815b76de2e340d4ef4712fd26c5345220a33b2aa1a4f188a670

  • SHA512

    2e9ec9a667247d4f87e509f17874460ed9446a56b49a1df95a96f6910cf2dab343c6c0f366a73d702996a9df405460a1d37bc285e8ea4197ec6bcdeea805b244

  • SSDEEP

    3072:SBd1dE2MtU7Qv0w4ZRRQMMDwtIMCeFP4ANA4oQZiEUPVe:wdDE2R7Qvb4tQTaCeFP4A+W+PU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      014d60fd6d7a984e50d543b60ad8dcdd

    • Size

      156KB

    • MD5

      014d60fd6d7a984e50d543b60ad8dcdd

    • SHA1

      6e3b90b5cd6d54d7f291e806cc88a2308a11f90e

    • SHA256

      6e29d20929bfd815b76de2e340d4ef4712fd26c5345220a33b2aa1a4f188a670

    • SHA512

      2e9ec9a667247d4f87e509f17874460ed9446a56b49a1df95a96f6910cf2dab343c6c0f366a73d702996a9df405460a1d37bc285e8ea4197ec6bcdeea805b244

    • SSDEEP

      3072:SBd1dE2MtU7Qv0w4ZRRQMMDwtIMCeFP4ANA4oQZiEUPVe:wdDE2R7Qvb4tQTaCeFP4A+W+PU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks