Overview

overview

10

Static

static

3b35b887f4...72.exe

windows7-x64

10

3b35b887f4...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b35b887f4ae2f82f7e6c45565ab5f78778919644f7d8e8add84e4f2fdac6872

  • Size

    140KB

  • Sample

    221124-aeds9seb78

  • MD5

    349fc8a69087793fb3c2449c9665e26b

  • SHA1

    033f5f89d4cd21aee376accd5df1ec9e30472583

  • SHA256

    3b35b887f4ae2f82f7e6c45565ab5f78778919644f7d8e8add84e4f2fdac6872

  • SHA512

    cbc6d1869190ba4d0efc5a2972b05854b0b8e6a63e6f1db1168dd19968d7a0e018c70bf68fe2157e61c0f05f45fffd2d01f15e7cd062b35d1e1166db2e24bacb

  • SSDEEP

    3072:FbsIGPwgRkWwuXdzDwWX0fTIZOaA481GkQr+drjOBgqEqD:FDWwuXdzDwWX0fTIZOaAYkQrGrjOBgh

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3b35b887f4ae2f82f7e6c45565ab5f78778919644f7d8e8add84e4f2fdac6872

    • Size

      140KB

    • MD5

      349fc8a69087793fb3c2449c9665e26b

    • SHA1

      033f5f89d4cd21aee376accd5df1ec9e30472583

    • SHA256

      3b35b887f4ae2f82f7e6c45565ab5f78778919644f7d8e8add84e4f2fdac6872

    • SHA512

      cbc6d1869190ba4d0efc5a2972b05854b0b8e6a63e6f1db1168dd19968d7a0e018c70bf68fe2157e61c0f05f45fffd2d01f15e7cd062b35d1e1166db2e24bacb

    • SSDEEP

      3072:FbsIGPwgRkWwuXdzDwWX0fTIZOaA481GkQr+drjOBgqEqD:FDWwuXdzDwWX0fTIZOaAYkQrGrjOBgh

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks