Overview

overview

10

Static

static

3

10362cf06a...3a.exe

windows7-x64

10

10362cf06a...3a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    10362cf06aac00183f7922f10569103a

  • Size

    252KB

  • Sample

    231225-jqkwdsgcb2

  • MD5

    10362cf06aac00183f7922f10569103a

  • SHA1

    29a43fb3972218afef486fb59dfb3583303d0038

  • SHA256

    4fb6e314814eab527f8723536f20604afbf0effc8f09248204826add09649c1d

  • SHA512

    9c97863a026a7d93502323261320585f3d9dcf2302ab829c9785c5e3318fd51c1e73bbda930d9adae49025f502fac13f65cb7e086dd7f2783306981e885582c7

  • SSDEEP

    3072:VrAcmx7LaJsWvZ0OgRqTAJcLGGO/xuiEyJeOOeGs5oxnkNzQKtjQi:VrLFx/ZLA4PmG6dZ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      10362cf06aac00183f7922f10569103a

    • Size

      252KB

    • MD5

      10362cf06aac00183f7922f10569103a

    • SHA1

      29a43fb3972218afef486fb59dfb3583303d0038

    • SHA256

      4fb6e314814eab527f8723536f20604afbf0effc8f09248204826add09649c1d

    • SHA512

      9c97863a026a7d93502323261320585f3d9dcf2302ab829c9785c5e3318fd51c1e73bbda930d9adae49025f502fac13f65cb7e086dd7f2783306981e885582c7

    • SSDEEP

      3072:VrAcmx7LaJsWvZ0OgRqTAJcLGGO/xuiEyJeOOeGs5oxnkNzQKtjQi:VrLFx/ZLA4PmG6dZ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks