Overview

overview

10

Static

static

3

0889ab88e6...ff.exe

windows7-x64

10

0889ab88e6...ff.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0889ab88e6600b68fb0d680463a0a1ff

  • Size

    64KB

  • Sample

    231225-gbl4sshdd9

  • MD5

    0889ab88e6600b68fb0d680463a0a1ff

  • SHA1

    18e93778d334e01fdace10ab1dd41793c1b8c761

  • SHA256

    19d2bc696df6e60ee30ab2e3419d5eeee3695cdd4376014fc240559add980e8d

  • SHA512

    fbf0fd825646775b6277e3af16ea1814e47d9f325a36cc6ea00fda2ed75191fc178b7f6dcf372a8bc79ba6ee68172ca337943e1c14bad9faa0614184dd6b61aa

  • SSDEEP

    768:EF5RLFVAdTg3f5wLxBznaXS4dJXyOs3zM2tRbUcAsYFLAglRuhjcL:EF5ZLAdTk5wPaXS4DsjZbUfJlMhjU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0889ab88e6600b68fb0d680463a0a1ff

    • Size

      64KB

    • MD5

      0889ab88e6600b68fb0d680463a0a1ff

    • SHA1

      18e93778d334e01fdace10ab1dd41793c1b8c761

    • SHA256

      19d2bc696df6e60ee30ab2e3419d5eeee3695cdd4376014fc240559add980e8d

    • SHA512

      fbf0fd825646775b6277e3af16ea1814e47d9f325a36cc6ea00fda2ed75191fc178b7f6dcf372a8bc79ba6ee68172ca337943e1c14bad9faa0614184dd6b61aa

    • SSDEEP

      768:EF5RLFVAdTg3f5wLxBznaXS4dJXyOs3zM2tRbUcAsYFLAglRuhjcL:EF5ZLAdTk5wPaXS4DsjZbUfJlMhjU

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks