Overview

overview

10

Static

static

5603780f21...e4.exe

windows7-x64

10

5603780f21...e4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5603780f2129f7536ab86469699a471bc91e4162cfccf7f47cb55b1c98c079e4

  • Size

    45KB

  • Sample

    221205-m3dvdscf98

  • MD5

    05332fc3335c20cb8e6503e79b7a765e

  • SHA1

    5c32752d6d4298bb4f7f6508bdbf24ab6566936d

  • SHA256

    5603780f2129f7536ab86469699a471bc91e4162cfccf7f47cb55b1c98c079e4

  • SHA512

    ec13b3ab77206dfe3efcffd5d42dd7a5d0e7ab53caf0ffc2c46c586e853b738717a01b0cf15a7da627de65253dc5afe8e64c496fe25cdc1440960ca1f1428903

  • SSDEEP

    768:E1AuwHyeFo6NPIFAoslbf8eRYLGXdoIFbb5omuKWcbsvwnoT9D88888888888JX3:EOxyeFo6NPCAosxYyXdF5oy3VoK3

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5603780f2129f7536ab86469699a471bc91e4162cfccf7f47cb55b1c98c079e4

    • Size

      45KB

    • MD5

      05332fc3335c20cb8e6503e79b7a765e

    • SHA1

      5c32752d6d4298bb4f7f6508bdbf24ab6566936d

    • SHA256

      5603780f2129f7536ab86469699a471bc91e4162cfccf7f47cb55b1c98c079e4

    • SHA512

      ec13b3ab77206dfe3efcffd5d42dd7a5d0e7ab53caf0ffc2c46c586e853b738717a01b0cf15a7da627de65253dc5afe8e64c496fe25cdc1440960ca1f1428903

    • SSDEEP

      768:E1AuwHyeFo6NPIFAoslbf8eRYLGXdoIFbb5omuKWcbsvwnoT9D88888888888JX3:EOxyeFo6NPCAosxYyXdF5oy3VoK3

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks