Overview

overview

10

Static

static

10

61439535f1...30.lnk

windows7_x64

10

61439535f1...30.lnk

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61439535f175a654bf6e5dd26304cadb347918e2a1fa81ad72aba363f9600730

  • Size

    940KB

  • Sample

    220204-ked45sfgf8

  • MD5

    40d64f88071b43abaf29687a1f1ed882

  • SHA1

    f0db18e0fd8c376a7ef7316c413240857f37ccaa

  • SHA256

    61439535f175a654bf6e5dd26304cadb347918e2a1fa81ad72aba363f9600730

  • SHA512

    a9974a8c3d3b75fe1ad29b9b3dbe4ffe192fdced10178b58fc964b4e2a862686964a3c97ed14684fdd0201b0473a6a46703e1c8efb162a36521f2d2537b39883

Score
10/10
evilnumpersistencetrojan

Malware Config

Targets

    • Target

      61439535f175a654bf6e5dd26304cadb347918e2a1fa81ad72aba363f9600730

    • Size

      940KB

    • MD5

      40d64f88071b43abaf29687a1f1ed882

    • SHA1

      f0db18e0fd8c376a7ef7316c413240857f37ccaa

    • SHA256

      61439535f175a654bf6e5dd26304cadb347918e2a1fa81ad72aba363f9600730

    • SHA512

      a9974a8c3d3b75fe1ad29b9b3dbe4ffe192fdced10178b58fc964b4e2a862686964a3c97ed14684fdd0201b0473a6a46703e1c8efb162a36521f2d2537b39883

    Score
    10/10
    evilnumtrojanpersistence

    • Evilnum

      A malware family with multiple components distributed through LNK files.

      trojanevilnum

    • Sets service image path in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks