Overview

overview

10

Static

static

3

6384c77011...27.exe

windows7-x64

10

6384c77011...27.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6384c77011929f08660f14c72f762527

  • Size

    244KB

  • Sample

    231226-lc998sgcer

  • MD5

    6384c77011929f08660f14c72f762527

  • SHA1

    163e2c4dee6c3d2d4c0cc42be0ed9013ad0a789e

  • SHA256

    4a1e1149116c1ff68358a2c8c804bda2055d0b9adba08c2f2558e2aefe3ac78c

  • SHA512

    dcdebc10da30cac2bb3952d6f942cf0b86ea568b5a040ce8748e09ac4f705f32e86a0cb6b395bec7d6b9b003981d98c56a082472c417b8d02e3899c3cda5d45c

  • SSDEEP

    3072:7hPBdBsROnFQroR5yIuSP9lqVinU3bp/PTm2moJ6BwA+GABMndgSqrr:7hJdV7PnqVinU3bw2moJ6WAdgB3

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6384c77011929f08660f14c72f762527

    • Size

      244KB

    • MD5

      6384c77011929f08660f14c72f762527

    • SHA1

      163e2c4dee6c3d2d4c0cc42be0ed9013ad0a789e

    • SHA256

      4a1e1149116c1ff68358a2c8c804bda2055d0b9adba08c2f2558e2aefe3ac78c

    • SHA512

      dcdebc10da30cac2bb3952d6f942cf0b86ea568b5a040ce8748e09ac4f705f32e86a0cb6b395bec7d6b9b003981d98c56a082472c417b8d02e3899c3cda5d45c

    • SSDEEP

      3072:7hPBdBsROnFQroR5yIuSP9lqVinU3bp/PTm2moJ6BwA+GABMndgSqrr:7hJdV7PnqVinU3bw2moJ6WAdgB3

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks