Overview

overview

10

Static

static

78388f3b47...5f.exe

windows7-x64

10

78388f3b47...5f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    78388f3b471a5c208fcb6f701ec89c1eb92501075c6b37dccc588578819bc55f

  • Size

    168KB

  • Sample

    221014-mccveaahf4

  • MD5

    60964ffed2348ee031274be99e09bf1e

  • SHA1

    3b6f18fa990656e1fd712d09b78ac7cf2fb47558

  • SHA256

    78388f3b471a5c208fcb6f701ec89c1eb92501075c6b37dccc588578819bc55f

  • SHA512

    788035602c419cbd4164ad7f6def77ee547557952973cd5700113af7aeb4e5fe7bfb1c6fd7ee4f9fd8d1e752f812eca26b6012b98042facdb4b0883535c2fc9a

  • SSDEEP

    1536:BASlHooXxTaSfm8UI+FQZAq7UjbJw5aCUZeBB++7XVFfFRE/9jMhmqLBzmBG:dlHooXxYUZvUH2aZZer++7XVbtEG

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      78388f3b471a5c208fcb6f701ec89c1eb92501075c6b37dccc588578819bc55f

    • Size

      168KB

    • MD5

      60964ffed2348ee031274be99e09bf1e

    • SHA1

      3b6f18fa990656e1fd712d09b78ac7cf2fb47558

    • SHA256

      78388f3b471a5c208fcb6f701ec89c1eb92501075c6b37dccc588578819bc55f

    • SHA512

      788035602c419cbd4164ad7f6def77ee547557952973cd5700113af7aeb4e5fe7bfb1c6fd7ee4f9fd8d1e752f812eca26b6012b98042facdb4b0883535c2fc9a

    • SSDEEP

      1536:BASlHooXxTaSfm8UI+FQZAq7UjbJw5aCUZeBB++7XVFfFRE/9jMhmqLBzmBG:dlHooXxYUZvUH2aZZer++7XVbtEG

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks