Overview

overview

10

Static

static

e3f41f1b76...b2.exe

windows7-x64

10

e3f41f1b76...b2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3f41f1b7693ab0ca32715c5a218b215971ee5b06b6e769b02d2848e50606eb2

  • Size

    272KB

  • Sample

    221020-2pxgxahhf3

  • MD5

    7a7de661b611f3e10de3723d456af090

  • SHA1

    991c182359c69f8ab2a8ea882973ec521d0a28ff

  • SHA256

    e3f41f1b7693ab0ca32715c5a218b215971ee5b06b6e769b02d2848e50606eb2

  • SHA512

    52f02782abe1cce817df93378fcd2f454bc0ccc2be4d473817dd57953394c79f13068e4c45c6805ab4008aab6da07d3a82612a1e2783ba4f6cb519670c1ebbcb

  • SSDEEP

    3072:bG8TMShJdiw77OEcIlJ+k433GZ+cQRA7oTRCSAGjcc2zWm7/O2JN7RSNM:DiLEgnq+xRA7b4l23NENM

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e3f41f1b7693ab0ca32715c5a218b215971ee5b06b6e769b02d2848e50606eb2

    • Size

      272KB

    • MD5

      7a7de661b611f3e10de3723d456af090

    • SHA1

      991c182359c69f8ab2a8ea882973ec521d0a28ff

    • SHA256

      e3f41f1b7693ab0ca32715c5a218b215971ee5b06b6e769b02d2848e50606eb2

    • SHA512

      52f02782abe1cce817df93378fcd2f454bc0ccc2be4d473817dd57953394c79f13068e4c45c6805ab4008aab6da07d3a82612a1e2783ba4f6cb519670c1ebbcb

    • SSDEEP

      3072:bG8TMShJdiw77OEcIlJ+k433GZ+cQRA7oTRCSAGjcc2zWm7/O2JN7RSNM:DiLEgnq+xRA7b4l23NENM

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks