Overview

overview

10

Static

static

3

7d6029167c...19.exe

windows7-x64

10

7d6029167c...19.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7d6029167c6064d136c53c1f366f8419

  • Size

    320KB

  • Sample

    240128-s9waxaefcl

  • MD5

    7d6029167c6064d136c53c1f366f8419

  • SHA1

    bb02f8c4e823dc760bffd8ffef25fb8cca905ddf

  • SHA256

    2f268bdfd5fb2453b7b2752058560aeeaa695235dcb70f895f200774d5f93692

  • SHA512

    6f6b7462403fae9300a1708c9b33a6442ec08c660d18ab909993237adb6c22a7edc5435a857bd11bdd9d49f7d6574c64e359447605dff84f8ca714c11f396d3a

  • SSDEEP

    6144:uLc8NGKI//d8xgN3+E9xz3DfQr1w2O6EU02DPp9nrg5G35aJevhRGGhfZkEscw0e:QVLg9+EDEnhtHAJevHsEscw0LcX

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7d6029167c6064d136c53c1f366f8419

    • Size

      320KB

    • MD5

      7d6029167c6064d136c53c1f366f8419

    • SHA1

      bb02f8c4e823dc760bffd8ffef25fb8cca905ddf

    • SHA256

      2f268bdfd5fb2453b7b2752058560aeeaa695235dcb70f895f200774d5f93692

    • SHA512

      6f6b7462403fae9300a1708c9b33a6442ec08c660d18ab909993237adb6c22a7edc5435a857bd11bdd9d49f7d6574c64e359447605dff84f8ca714c11f396d3a

    • SSDEEP

      6144:uLc8NGKI//d8xgN3+E9xz3DfQr1w2O6EU02DPp9nrg5G35aJevhRGGhfZkEscw0e:QVLg9+EDEnhtHAJevHsEscw0LcX

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks