Overview

overview

10

Static

static

3

aaa8ae0f89...62.exe

windows7-x64

10

aaa8ae0f89...62.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aaa8ae0f89bde2fc6451b82db2141362

  • Size

    248KB

  • Sample

    240228-bxbmasga72

  • MD5

    aaa8ae0f89bde2fc6451b82db2141362

  • SHA1

    2e42d25788f065e9416fdeb7e33c3dbfa21bbd44

  • SHA256

    42d498fc9985f478cc9045a7e6f72062d4c7d30ede5c4d6b1c2ce2ad58aeeded

  • SHA512

    ef7371607ca9a1c79c89e8ffafe2fc71ad3d6fb0fd273fd206f2d45ec932663ef3bfffbfe913871d2b6f07f38ffbeb71128951830ffa21f430aa8171f3a47172

  • SSDEEP

    3072:9JwSW42t0z43JOFQfOTbjaoL7mZW0h/tlVu/T8cLBZ:9JjW42t0z43JOFQfOO

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      aaa8ae0f89bde2fc6451b82db2141362

    • Size

      248KB

    • MD5

      aaa8ae0f89bde2fc6451b82db2141362

    • SHA1

      2e42d25788f065e9416fdeb7e33c3dbfa21bbd44

    • SHA256

      42d498fc9985f478cc9045a7e6f72062d4c7d30ede5c4d6b1c2ce2ad58aeeded

    • SHA512

      ef7371607ca9a1c79c89e8ffafe2fc71ad3d6fb0fd273fd206f2d45ec932663ef3bfffbfe913871d2b6f07f38ffbeb71128951830ffa21f430aa8171f3a47172

    • SSDEEP

      3072:9JwSW42t0z43JOFQfOTbjaoL7mZW0h/tlVu/T8cLBZ:9JjW42t0z43JOFQfOO

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks