Overview

overview

10

Static

static

3b98594fac...5e.exe

windows7-x64

10

3b98594fac...5e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3b98594facf0984ccdef22b4dcd5e3501e11b7ebadec8133b6b9a29faa8da85e

  • Size

    124KB

  • Sample

    221021-byrpxaehh3

  • MD5

    55b2a3b6c29c745589c73c97d2cbb2ec

  • SHA1

    0e4c197f8d879be7aa4752bb45b5938cf39fe13f

  • SHA256

    3b98594facf0984ccdef22b4dcd5e3501e11b7ebadec8133b6b9a29faa8da85e

  • SHA512

    f9ebe4fb9dc2b4a6c09f6d40ad202a8f28a668dba77c7345e2e372327ce66e928098f25b8494565512cd6feb02974ef5cf36ce9473d87ea5cb081515b0e9ed54

  • SSDEEP

    1536:T/cZYl02OnFWnJiq6H48O6j6/t66366Z6Jz36k6eA66KD6sqG/Oji6FA8HxAH6xs:jWD2OnFeS3e50wMZZZZWMkIJrX

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3b98594facf0984ccdef22b4dcd5e3501e11b7ebadec8133b6b9a29faa8da85e

    • Size

      124KB

    • MD5

      55b2a3b6c29c745589c73c97d2cbb2ec

    • SHA1

      0e4c197f8d879be7aa4752bb45b5938cf39fe13f

    • SHA256

      3b98594facf0984ccdef22b4dcd5e3501e11b7ebadec8133b6b9a29faa8da85e

    • SHA512

      f9ebe4fb9dc2b4a6c09f6d40ad202a8f28a668dba77c7345e2e372327ce66e928098f25b8494565512cd6feb02974ef5cf36ce9473d87ea5cb081515b0e9ed54

    • SSDEEP

      1536:T/cZYl02OnFWnJiq6H48O6j6/t66366Z6Jz36k6eA66KD6sqG/Oji6FA8HxAH6xs:jWD2OnFeS3e50wMZZZZWMkIJrX

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks