Overview

overview

10

Static

static

b3c47a1c32...9f.exe

windows7-x64

10

b3c47a1c32...9f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3c47a1c325b97cc47ebfa7f8d0f0b4323588d90eed336a233c17c08f1fdc19f

  • Size

    184KB

  • Sample

    221003-h2l26acge2

  • MD5

    0027930ab761fbe64ba480cad34ac8c7

  • SHA1

    8377ca5a7d28269b08c41ae4fec0ab2608bf2df3

  • SHA256

    b3c47a1c325b97cc47ebfa7f8d0f0b4323588d90eed336a233c17c08f1fdc19f

  • SHA512

    41b6d749b983eb28ea444e6b6b4c577d846b60e0c3b0bb7627b3a172fb9144380600d2b75b7c1969eb6e9ff9424de4d49359ce121886a226be46c9d0c2cf14b9

  • SSDEEP

    3072:1WOMlXL6KvWeRl6Knvmb7/D26DKcAA6vQOm34lK5/si+bS3P:UX5VREKnvmb7/D26DKcV67m34E5/sNS/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b3c47a1c325b97cc47ebfa7f8d0f0b4323588d90eed336a233c17c08f1fdc19f

    • Size

      184KB

    • MD5

      0027930ab761fbe64ba480cad34ac8c7

    • SHA1

      8377ca5a7d28269b08c41ae4fec0ab2608bf2df3

    • SHA256

      b3c47a1c325b97cc47ebfa7f8d0f0b4323588d90eed336a233c17c08f1fdc19f

    • SHA512

      41b6d749b983eb28ea444e6b6b4c577d846b60e0c3b0bb7627b3a172fb9144380600d2b75b7c1969eb6e9ff9424de4d49359ce121886a226be46c9d0c2cf14b9

    • SSDEEP

      3072:1WOMlXL6KvWeRl6Knvmb7/D26DKcAA6vQOm34lK5/si+bS3P:UX5VREKnvmb7/D26DKcV67m34E5/sNS/

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks