Overview

overview

10

Static

static

3

0007e5c6c6...84.exe

windows7-x64

10

0007e5c6c6...84.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0007e5c6c6c14be147bb42ee48d3a884

  • Size

    248KB

  • Sample

    231225-czhztscaf8

  • MD5

    0007e5c6c6c14be147bb42ee48d3a884

  • SHA1

    34f34e4212852fa974ec98ee5f4d44fb1d6b1ff3

  • SHA256

    58ef8c497f1eca9b5fdd826fe641d79960808d34b18c86ee18d6e167c46257e3

  • SHA512

    314bb96a455bb67dbbfa8da46c382ec239ae3fb2f3e8d58388058121ad4784fea36aa9424d77c5133fb2c5567cdc4487d8eec54d0739e5cb0c68b8a5282be758

  • SSDEEP

    3072:P4Oz45gnJOdmLGeCfcpwA5f3CEoEtUMbfLu:wOzNOK7cKiED5

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0007e5c6c6c14be147bb42ee48d3a884

    • Size

      248KB

    • MD5

      0007e5c6c6c14be147bb42ee48d3a884

    • SHA1

      34f34e4212852fa974ec98ee5f4d44fb1d6b1ff3

    • SHA256

      58ef8c497f1eca9b5fdd826fe641d79960808d34b18c86ee18d6e167c46257e3

    • SHA512

      314bb96a455bb67dbbfa8da46c382ec239ae3fb2f3e8d58388058121ad4784fea36aa9424d77c5133fb2c5567cdc4487d8eec54d0739e5cb0c68b8a5282be758

    • SSDEEP

      3072:P4Oz45gnJOdmLGeCfcpwA5f3CEoEtUMbfLu:wOzNOK7cKiED5

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks