Overview

overview

10

Static

static

3d46510f74...d5.exe

windows7-x64

10

3d46510f74...d5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3d46510f74b3b33037576144485cdc2da784b15192fab75a7b02ce771afdd9d5

  • Size

    160KB

  • Sample

    221029-tstw7adhg6

  • MD5

    a3520d0e8be24cd1f1554fbb6a18b530

  • SHA1

    3814abf3776cfa4fb77a70e3d5dd7521e2f9d506

  • SHA256

    3d46510f74b3b33037576144485cdc2da784b15192fab75a7b02ce771afdd9d5

  • SHA512

    4c9a219c46acb5f5cda4ee9305400f4bfd205974e7a89f8c1df926104a3b45539c03cefa29caf10124f8001dfc3525c31c42216aa00bffd734c87b1a6339b71c

  • SSDEEP

    3072:BhNxJptfKqOdBsebgeDyJiqmdoTtawZPotUPvPDspYxjatL0JiTeDXokR49M6e3k:vNDptfKRLsebgeDyJtmdo7PIWDspYJan

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3d46510f74b3b33037576144485cdc2da784b15192fab75a7b02ce771afdd9d5

    • Size

      160KB

    • MD5

      a3520d0e8be24cd1f1554fbb6a18b530

    • SHA1

      3814abf3776cfa4fb77a70e3d5dd7521e2f9d506

    • SHA256

      3d46510f74b3b33037576144485cdc2da784b15192fab75a7b02ce771afdd9d5

    • SHA512

      4c9a219c46acb5f5cda4ee9305400f4bfd205974e7a89f8c1df926104a3b45539c03cefa29caf10124f8001dfc3525c31c42216aa00bffd734c87b1a6339b71c

    • SSDEEP

      3072:BhNxJptfKqOdBsebgeDyJiqmdoTtawZPotUPvPDspYxjatL0JiTeDXokR49M6e3k:vNDptfKRLsebgeDyJtmdo7PIWDspYJan

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks