Overview

overview

10

Static

static

379b3c4008...5b.exe

windows7-x64

10

379b3c4008...5b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    379b3c40085cd616314aea2e9ab2f9fef379ea19b0f18460a1981e0d24812c5b

  • Size

    108KB

  • Sample

    221020-l7qjbahba6

  • MD5

    43509b19f705009986e87619a5f2e4b0

  • SHA1

    efad6fc2f764b8e254bd8b5ce9d7dd07b99236a4

  • SHA256

    379b3c40085cd616314aea2e9ab2f9fef379ea19b0f18460a1981e0d24812c5b

  • SHA512

    df0987d03c18b0126810c8fb864f7733d9cc2031280db41e8ae60c6445b20f735c0683488782454e6d4b0f3495652e37dc0b02ae2f92232f6aeda524191db053

  • SSDEEP

    1536:u/bSZSPY0OJofZMf8G6oXvHyELqOW3GFw7vwmqFkyYpWe5srvIyiA+UWI5Q0wXTt:eH7oXfO7LqW3X7gr8

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      379b3c40085cd616314aea2e9ab2f9fef379ea19b0f18460a1981e0d24812c5b

    • Size

      108KB

    • MD5

      43509b19f705009986e87619a5f2e4b0

    • SHA1

      efad6fc2f764b8e254bd8b5ce9d7dd07b99236a4

    • SHA256

      379b3c40085cd616314aea2e9ab2f9fef379ea19b0f18460a1981e0d24812c5b

    • SHA512

      df0987d03c18b0126810c8fb864f7733d9cc2031280db41e8ae60c6445b20f735c0683488782454e6d4b0f3495652e37dc0b02ae2f92232f6aeda524191db053

    • SSDEEP

      1536:u/bSZSPY0OJofZMf8G6oXvHyELqOW3GFw7vwmqFkyYpWe5srvIyiA+UWI5Q0wXTt:eH7oXfO7LqW3X7gr8

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks