Overview

overview

8

Static

static

1

hidemyip.exe

windows10-1703-x64

8

hidemyip.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    hidemyip.exe

  • Size

    5.2MB

  • Sample

    230215-zjvp1sdg4y

  • MD5

    977d272af1a1f2d968ebb00e82c9eecd

  • SHA1

    4ef47b68004380df44356ab79faad3610d88730f

  • SHA256

    f61bc09e2686c52ea44b49498ecd4f292c4feb65ae131bd96bea1d569e9c5959

  • SHA512

    c9506a21050bc74bb88f195d1c1f715b6a6894a0cdd8964cae9c19dd0bdfeaed0d5b3d7fec30c1c77fabd97cd2eb43cf8394c3823153e847e6334f879d894986

  • SSDEEP

    98304:Pr3ED9PrtDAgfNxVe5BmZJtskn0ZvBp3jaxDZ1VrQOqE2euzhMMuGbuIcFvG:SphfLV6IbnaBpGxdlq7euzhMMLcRG

Score
8/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      hidemyip.exe

    • Size

      5.2MB

    • MD5

      977d272af1a1f2d968ebb00e82c9eecd

    • SHA1

      4ef47b68004380df44356ab79faad3610d88730f

    • SHA256

      f61bc09e2686c52ea44b49498ecd4f292c4feb65ae131bd96bea1d569e9c5959

    • SHA512

      c9506a21050bc74bb88f195d1c1f715b6a6894a0cdd8964cae9c19dd0bdfeaed0d5b3d7fec30c1c77fabd97cd2eb43cf8394c3823153e847e6334f879d894986

    • SSDEEP

      98304:Pr3ED9PrtDAgfNxVe5BmZJtskn0ZvBp3jaxDZ1VrQOqE2euzhMMuGbuIcFvG:SphfLV6IbnaBpGxdlq7euzhMMLcRG

    Score
    8/10
    discoveryevasionpersistence

    • Modifies Windows Firewall

      evasion

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks