Overview

overview

10

Static

static

3

05a88ce8f9...7c.exe

windows7-x64

10

05a88ce8f9...7c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05a88ce8f9315aa7b3a1b1432b69217c

  • Size

    52KB

  • Sample

    231225-fajrlsaeg3

  • MD5

    05a88ce8f9315aa7b3a1b1432b69217c

  • SHA1

    1a9b37d6162fe27a28f2d7104234aa34044300f1

  • SHA256

    30a49c6d2c9926d9165785e895befe3ecb6fc4c5f24965cfb379aaf2309a1fe1

  • SHA512

    58a0e5626c7cc533274a9e7df264ad85eee6a770489ae2397bbb87c7d9f8273f45d8857bb54629f6d156bb23d28eab199a1f9d0b550773d3dd3bf5433b0cab29

  • SSDEEP

    768:ubWnCwYQX6N1nfo1jskr/v/m89S3rkC6R+wibw52Tzp//:uh66NNwNskr3mbkC6R+Xp//

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      05a88ce8f9315aa7b3a1b1432b69217c

    • Size

      52KB

    • MD5

      05a88ce8f9315aa7b3a1b1432b69217c

    • SHA1

      1a9b37d6162fe27a28f2d7104234aa34044300f1

    • SHA256

      30a49c6d2c9926d9165785e895befe3ecb6fc4c5f24965cfb379aaf2309a1fe1

    • SHA512

      58a0e5626c7cc533274a9e7df264ad85eee6a770489ae2397bbb87c7d9f8273f45d8857bb54629f6d156bb23d28eab199a1f9d0b550773d3dd3bf5433b0cab29

    • SSDEEP

      768:ubWnCwYQX6N1nfo1jskr/v/m89S3rkC6R+wibw52Tzp//:uh66NNwNskr3mbkC6R+Xp//

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks