Overview

overview

10

Static

static

3ea0778d93...b0.exe

windows7-x64

10

3ea0778d93...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ea0778d93937fd64b2b6dbf71bdf155a5ed51b82af039b6510dc751c8353fb0

  • Size

    135KB

  • Sample

    221003-dx7qvaeaf3

  • MD5

    6dd0e6bac4a35e242db0b121bdeba4c0

  • SHA1

    25e5f7dd6dba9c0d89bfb65ba9793a36a9795c51

  • SHA256

    3ea0778d93937fd64b2b6dbf71bdf155a5ed51b82af039b6510dc751c8353fb0

  • SHA512

    759d748062663509b76b91277a5a4c7cd3b7f0f4e03f35f01678d33d1040513a6f7c11ac57ae47172319969e7398e41b028de2f2ef61582124e0ec860062b052

  • SSDEEP

    3072:D0FZn5ygMUPb1WpXVxAaGBvbNvNbNJkvmhyPQbaDTUXGIDbwKDqCtrwdAxaVTtVS:4FZn5ySoIDbByGPMsMP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3ea0778d93937fd64b2b6dbf71bdf155a5ed51b82af039b6510dc751c8353fb0

    • Size

      135KB

    • MD5

      6dd0e6bac4a35e242db0b121bdeba4c0

    • SHA1

      25e5f7dd6dba9c0d89bfb65ba9793a36a9795c51

    • SHA256

      3ea0778d93937fd64b2b6dbf71bdf155a5ed51b82af039b6510dc751c8353fb0

    • SHA512

      759d748062663509b76b91277a5a4c7cd3b7f0f4e03f35f01678d33d1040513a6f7c11ac57ae47172319969e7398e41b028de2f2ef61582124e0ec860062b052

    • SSDEEP

      3072:D0FZn5ygMUPb1WpXVxAaGBvbNvNbNJkvmhyPQbaDTUXGIDbwKDqCtrwdAxaVTtVS:4FZn5ySoIDbByGPMsMP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks