Overview

overview

8

Static

static

c3bfdc9a30...47.exe

windows7-x64

8

c3bfdc9a30...47.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3bfdc9a30d086d62cc1d17b95e45a5066d5aef772a58dc34ce19d9712256247

  • Size

    955KB

  • Sample

    221021-frt9nsdca6

  • MD5

    71305da50038062a1c36933557c808d0

  • SHA1

    8c521905b1e6ecdb4d5717369fa88bb645ff43fb

  • SHA256

    c3bfdc9a30d086d62cc1d17b95e45a5066d5aef772a58dc34ce19d9712256247

  • SHA512

    8ab8bf03f85840642705ca0896da1e587314d58925ca47ac01e3a400eee0c6a40cb293ee38975585726457a53d4cfb61c46107e3f289e3406735386cb6a0144d

  • SSDEEP

    12288:b4ZoCUyZtwAvAs4wTCyrPT0yq0VezaOvoJpaz/g/J/vVoS:katy/wAvN7lry0VeH8az/g/J/No

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      c3bfdc9a30d086d62cc1d17b95e45a5066d5aef772a58dc34ce19d9712256247

    • Size

      955KB

    • MD5

      71305da50038062a1c36933557c808d0

    • SHA1

      8c521905b1e6ecdb4d5717369fa88bb645ff43fb

    • SHA256

      c3bfdc9a30d086d62cc1d17b95e45a5066d5aef772a58dc34ce19d9712256247

    • SHA512

      8ab8bf03f85840642705ca0896da1e587314d58925ca47ac01e3a400eee0c6a40cb293ee38975585726457a53d4cfb61c46107e3f289e3406735386cb6a0144d

    • SSDEEP

      12288:b4ZoCUyZtwAvAs4wTCyrPT0yq0VezaOvoJpaz/g/J/vVoS:katy/wAvN7lry0VeH8az/g/J/No

    Score
    8/10
    evasionpersistence

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Stops running service(s)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks