Overview

overview

10

Static

static

02458150b3...44.exe

windows7-x64

10

02458150b3...44.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02458150b3a857e1bb87d335bef2e0e543fadcdc0501bbbe27143fa48472fb44

  • Size

    176KB

  • Sample

    221020-sn9w6sbdb3

  • MD5

    96f77151eb14b0ebef05063645117a58

  • SHA1

    d96faa2f2cbb2fe82fb6008abe43225c6887e810

  • SHA256

    02458150b3a857e1bb87d335bef2e0e543fadcdc0501bbbe27143fa48472fb44

  • SHA512

    24c415e0cb52348252447e5344a16c45d7762ba1a45bbf51a9b04916c4abff7afda28cbdd41bb9c0b7265b2d4d8b621081f92b19a4fa9ad372e9a09760f2e9b1

  • SSDEEP

    3072:zGCh8C/nROzg7iiwJvXZETcbLn67kLpyRurohZbsn4KhWNUzMzGV5/bBD3ypIulE:yCh7YU7iiwJvXZETcbLn6YLProhZbsnu

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      02458150b3a857e1bb87d335bef2e0e543fadcdc0501bbbe27143fa48472fb44

    • Size

      176KB

    • MD5

      96f77151eb14b0ebef05063645117a58

    • SHA1

      d96faa2f2cbb2fe82fb6008abe43225c6887e810

    • SHA256

      02458150b3a857e1bb87d335bef2e0e543fadcdc0501bbbe27143fa48472fb44

    • SHA512

      24c415e0cb52348252447e5344a16c45d7762ba1a45bbf51a9b04916c4abff7afda28cbdd41bb9c0b7265b2d4d8b621081f92b19a4fa9ad372e9a09760f2e9b1

    • SSDEEP

      3072:zGCh8C/nROzg7iiwJvXZETcbLn67kLpyRurohZbsn4KhWNUzMzGV5/bBD3ypIulE:yCh7YU7iiwJvXZETcbLn6YLProhZbsnu

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks