Overview

overview

10

Static

static

3

28c6034dc1...2e.exe

windows7-x64

10

28c6034dc1...2e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    28c6034dc13ef0e2b698e0727b63ff2e

  • Size

    212KB

  • Sample

    231225-sqjg1aghh7

  • MD5

    28c6034dc13ef0e2b698e0727b63ff2e

  • SHA1

    a843d1343435822d258a79c466fbf4467720321b

  • SHA256

    9ab36fc25c0d3dcd810216b0abbfac8f438ab5f64528b954b762f44b642e3bf6

  • SHA512

    1438865c11f49adfa24a69bc393d7a50fe0e4c833c22ea42d2153d219a3837e85e284f76956b33553f7b12f1c383fae92ae5626c2c56983ac3a3ac529de8632e

  • SSDEEP

    3072:D9UB99PLzx+sJhGYiNAcXOqQnys80/p5GomjRMEQYbLlmuPU+BfPc1rPU35pJuct:DqBjxEOqQn580/JXEJpc1rPYJn

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      28c6034dc13ef0e2b698e0727b63ff2e

    • Size

      212KB

    • MD5

      28c6034dc13ef0e2b698e0727b63ff2e

    • SHA1

      a843d1343435822d258a79c466fbf4467720321b

    • SHA256

      9ab36fc25c0d3dcd810216b0abbfac8f438ab5f64528b954b762f44b642e3bf6

    • SHA512

      1438865c11f49adfa24a69bc393d7a50fe0e4c833c22ea42d2153d219a3837e85e284f76956b33553f7b12f1c383fae92ae5626c2c56983ac3a3ac529de8632e

    • SSDEEP

      3072:D9UB99PLzx+sJhGYiNAcXOqQnys80/p5GomjRMEQYbLlmuPU+BfPc1rPU35pJuct:DqBjxEOqQn580/JXEJpc1rPYJn

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks