Overview

overview

10

Static

static

3e34b23829...23.exe

windows7-x64

10

3e34b23829...23.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e34b23829845ea98d5ca16c8710ab8ace5a7d4b6f683bffa74743dc8d85d723

  • Size

    95KB

  • Sample

    221126-2lq6qaea8s

  • MD5

    b43c648d70f4a5570f2ef321f0abb058

  • SHA1

    7a4630267fc5de6b6c21b7a0897219196ae2caec

  • SHA256

    3e34b23829845ea98d5ca16c8710ab8ace5a7d4b6f683bffa74743dc8d85d723

  • SHA512

    b789968356415f9c6d4fddef8ce10477d7c9b010f03c1a5ef03d2402be47412d82c8a969989185dc53becb68c339f16261577e7642b03f092a4cb63377a62f8e

  • SSDEEP

    1536:SG7oX4ubYkhJ5DXJ9IQsKO8cEk4hAn7FfY29F9MThAtcifUf:SGy4YYujXJ9IQ3c9vA29F9MThAt5q

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3e34b23829845ea98d5ca16c8710ab8ace5a7d4b6f683bffa74743dc8d85d723

    • Size

      95KB

    • MD5

      b43c648d70f4a5570f2ef321f0abb058

    • SHA1

      7a4630267fc5de6b6c21b7a0897219196ae2caec

    • SHA256

      3e34b23829845ea98d5ca16c8710ab8ace5a7d4b6f683bffa74743dc8d85d723

    • SHA512

      b789968356415f9c6d4fddef8ce10477d7c9b010f03c1a5ef03d2402be47412d82c8a969989185dc53becb68c339f16261577e7642b03f092a4cb63377a62f8e

    • SSDEEP

      1536:SG7oX4ubYkhJ5DXJ9IQsKO8cEk4hAn7FfY29F9MThAtcifUf:SGy4YYujXJ9IQ3c9vA29F9MThAt5q

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks