Overview

overview

10

Static

static

3

17589a3f16...09.exe

windows7-x64

10

17589a3f16...09.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    17589a3f16a948e3efdd0a7d6e217509

  • Size

    172KB

  • Sample

    231225-mj9sqaegap

  • MD5

    17589a3f16a948e3efdd0a7d6e217509

  • SHA1

    8cd00918e8e3247c35c687e746f6fc8cc0464057

  • SHA256

    32d11f25ac71652a069250e8c2f4904bb99658ece0862b458d68647467b8e45a

  • SHA512

    919355fc6438bcb263e1d3bcfe9aa9bff05635f1d5f7a8444525caeea38d237123e49bef7c974dcf0939ce644f0a2ed0d7c94eaa94317056f1259ad6a82a1cad

  • SSDEEP

    1536:hGhiS1ZAYNMUAEeKWScfp3p9MQsoz2fRnleTtbjpeMyowLJilE9:IpdWScfp3zsLt6bVejMlE

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      17589a3f16a948e3efdd0a7d6e217509

    • Size

      172KB

    • MD5

      17589a3f16a948e3efdd0a7d6e217509

    • SHA1

      8cd00918e8e3247c35c687e746f6fc8cc0464057

    • SHA256

      32d11f25ac71652a069250e8c2f4904bb99658ece0862b458d68647467b8e45a

    • SHA512

      919355fc6438bcb263e1d3bcfe9aa9bff05635f1d5f7a8444525caeea38d237123e49bef7c974dcf0939ce644f0a2ed0d7c94eaa94317056f1259ad6a82a1cad

    • SSDEEP

      1536:hGhiS1ZAYNMUAEeKWScfp3p9MQsoz2fRnleTtbjpeMyowLJilE9:IpdWScfp3zsLt6bVejMlE

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks