Overview

overview

10

Static

static

c5c3a673b5...a6.exe

windows7-x64

10

c5c3a673b5...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5c3a673b59a476f342e08448ce88371d88cfc2c471930aaa92b681d989fa1a6

  • Size

    188KB

  • Sample

    221201-3knvmsfe5y

  • MD5

    35734f54c42e513c96963c511ddc9bcd

  • SHA1

    fbe870b79f34153fd3be6def2866527a3777a2d8

  • SHA256

    c5c3a673b59a476f342e08448ce88371d88cfc2c471930aaa92b681d989fa1a6

  • SHA512

    1ce9fe2c57878a6ed2f02db7a512b874e156b34bbfaaeab910f627f84fd6a938caa78eb389ce3cbae371beacb2519e6aa484b0886c5e60f762558dcc3433dee3

  • SSDEEP

    3072:5cJcLLj1N2DZhv8yapZIvcFeqoSeaX/m7bfTWan9LxJ8DJOpPVKuqmqTgwa9MTX+:kcz1+ZhvzWevcFe/aX/m7bfTWan9lJ8s

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c5c3a673b59a476f342e08448ce88371d88cfc2c471930aaa92b681d989fa1a6

    • Size

      188KB

    • MD5

      35734f54c42e513c96963c511ddc9bcd

    • SHA1

      fbe870b79f34153fd3be6def2866527a3777a2d8

    • SHA256

      c5c3a673b59a476f342e08448ce88371d88cfc2c471930aaa92b681d989fa1a6

    • SHA512

      1ce9fe2c57878a6ed2f02db7a512b874e156b34bbfaaeab910f627f84fd6a938caa78eb389ce3cbae371beacb2519e6aa484b0886c5e60f762558dcc3433dee3

    • SSDEEP

      3072:5cJcLLj1N2DZhv8yapZIvcFeqoSeaX/m7bfTWan9LxJ8DJOpPVKuqmqTgwa9MTX+:kcz1+ZhvzWevcFe/aX/m7bfTWan9lJ8s

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks