Overview

overview

10

Static

static

3

eeb22edca8...31.exe

windows7-x64

10

eeb22edca8...31.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eeb22edca8632730a942c25bc2b201b1667507bd30a02f1c25a9ee5073e83031

  • Size

    204KB

  • Sample

    240425-fnckfsfh8x

  • MD5

    41658fbf5cf8306e1ccd3614b6e27275

  • SHA1

    61d2b20155ede7ab968510f101e2b728c8cc4a5c

  • SHA256

    eeb22edca8632730a942c25bc2b201b1667507bd30a02f1c25a9ee5073e83031

  • SHA512

    c00bca6b55fae71b6cdd087ab4dd45bfac3115e8477f946a94520985f7c2e280fa638b71cbc982ee38024fc4ab30430a00924781bbf0d5551951a6ff7ff0b94b

  • SSDEEP

    1536:H89dxHQ4zxHwxIKxNy3tQ9CW5EZWHakMwP9W6uXNi9f1AWa11GBPIdRONd+w6ES4:m/HQeq0tQ9nLHbB9W+k9ZJgImCttw

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      eeb22edca8632730a942c25bc2b201b1667507bd30a02f1c25a9ee5073e83031

    • Size

      204KB

    • MD5

      41658fbf5cf8306e1ccd3614b6e27275

    • SHA1

      61d2b20155ede7ab968510f101e2b728c8cc4a5c

    • SHA256

      eeb22edca8632730a942c25bc2b201b1667507bd30a02f1c25a9ee5073e83031

    • SHA512

      c00bca6b55fae71b6cdd087ab4dd45bfac3115e8477f946a94520985f7c2e280fa638b71cbc982ee38024fc4ab30430a00924781bbf0d5551951a6ff7ff0b94b

    • SSDEEP

      1536:H89dxHQ4zxHwxIKxNy3tQ9CW5EZWHakMwP9W6uXNi9f1AWa11GBPIdRONd+w6ES4:m/HQeq0tQ9nLHbB9W+k9ZJgImCttw

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks