Overview

overview

10

Static

static

e24a7f0395...07.exe

windows7-x64

10

e24a7f0395...07.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e24a7f03955fefa223517617fef8b22eb7bc85e3a47fab35b0fd51ef71442407

  • Size

    136KB

  • Sample

    221205-3gjrhsge47

  • MD5

    decf9d9242ccfbf4241ad90325fe1c2a

  • SHA1

    c7aafedb021b240a8f5ee2b40756b9156ae889db

  • SHA256

    e24a7f03955fefa223517617fef8b22eb7bc85e3a47fab35b0fd51ef71442407

  • SHA512

    7d9697dfd073466c550a80834a0136d95c0344c52b37ee9f62986898278adaa5c7dbf416cee5014b8b5fc3c9de1181383d4b2fc48764eb89b664a2a5772fa8cb

  • SSDEEP

    3072:MpTJovvXFwRBW1cQoj9MYuPCNtrK6tJTVUa37hmeK:qu/d2QRYjfTVU40e

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e24a7f03955fefa223517617fef8b22eb7bc85e3a47fab35b0fd51ef71442407

    • Size

      136KB

    • MD5

      decf9d9242ccfbf4241ad90325fe1c2a

    • SHA1

      c7aafedb021b240a8f5ee2b40756b9156ae889db

    • SHA256

      e24a7f03955fefa223517617fef8b22eb7bc85e3a47fab35b0fd51ef71442407

    • SHA512

      7d9697dfd073466c550a80834a0136d95c0344c52b37ee9f62986898278adaa5c7dbf416cee5014b8b5fc3c9de1181383d4b2fc48764eb89b664a2a5772fa8cb

    • SSDEEP

      3072:MpTJovvXFwRBW1cQoj9MYuPCNtrK6tJTVUa37hmeK:qu/d2QRYjfTVU40e

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks