Overview

overview

10

Static

static

3

0ad00b1ff7...16.exe

windows7-x64

10

0ad00b1ff7...16.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ad00b1ff727914f0c470bcf4690c116

  • Size

    216KB

  • Sample

    231224-wsxdesfhc7

  • MD5

    0ad00b1ff727914f0c470bcf4690c116

  • SHA1

    c6ce6cbfc963f300f7710aa712c92134b885b861

  • SHA256

    7fd68db629efef570647fe7fea0ef794690612aace522a5fa3c4f00e2d443e19

  • SHA512

    fcf587430df6626006c41421b9805e63dd0fc1abc4a5e35df0f27d7342cf577b96e18c3b095f80037e5e91a8837a2690cd9963694d0dea6d66feb6ab6805f263

  • SSDEEP

    1536:7sAVE8AuCyb0BeQ+bpuHe305Xrud0SAumJ30h+w4DAYJXMQUCJNwUHU7zDktvpXd:YTPuzCneu1uguiXMQjfZhvXStjNX

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0ad00b1ff727914f0c470bcf4690c116

    • Size

      216KB

    • MD5

      0ad00b1ff727914f0c470bcf4690c116

    • SHA1

      c6ce6cbfc963f300f7710aa712c92134b885b861

    • SHA256

      7fd68db629efef570647fe7fea0ef794690612aace522a5fa3c4f00e2d443e19

    • SHA512

      fcf587430df6626006c41421b9805e63dd0fc1abc4a5e35df0f27d7342cf577b96e18c3b095f80037e5e91a8837a2690cd9963694d0dea6d66feb6ab6805f263

    • SSDEEP

      1536:7sAVE8AuCyb0BeQ+bpuHe305Xrud0SAumJ30h+w4DAYJXMQUCJNwUHU7zDktvpXd:YTPuzCneu1uguiXMQjfZhvXStjNX

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks