Overview

overview

10

Static

static

3

2d757737b4...f3.exe

windows7-x64

10

2d757737b4...f3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d757737b43a2b900873cd85dd64b4f3

  • Size

    260KB

  • Sample

    231225-t2dlkahee3

  • MD5

    2d757737b43a2b900873cd85dd64b4f3

  • SHA1

    35efebd5b3a4e69333b0aec11858069a3875ffa7

  • SHA256

    13f15263fa17c417ebc8edb24db4d4a61cc3be4aa088871f9542da97d7468cb2

  • SHA512

    61ad9ffe05fb51e24aa824b652e1c77632c4922bca7e2d1749ee4c19cf599d1dbafb7e21f0f92764726797d362caebe70e11286b54e14c1041d55c158523e095

  • SSDEEP

    3072:MgfAlNsvh25n/kZoSUjMqXnpWAkpAmTSrMaIOYt/jo7LAtPhjjtZnfHFEoWBfGV3:MdxgTSrMaIl/jcLijfHFEHWzXvjT85R

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2d757737b43a2b900873cd85dd64b4f3

    • Size

      260KB

    • MD5

      2d757737b43a2b900873cd85dd64b4f3

    • SHA1

      35efebd5b3a4e69333b0aec11858069a3875ffa7

    • SHA256

      13f15263fa17c417ebc8edb24db4d4a61cc3be4aa088871f9542da97d7468cb2

    • SHA512

      61ad9ffe05fb51e24aa824b652e1c77632c4922bca7e2d1749ee4c19cf599d1dbafb7e21f0f92764726797d362caebe70e11286b54e14c1041d55c158523e095

    • SSDEEP

      3072:MgfAlNsvh25n/kZoSUjMqXnpWAkpAmTSrMaIOYt/jo7LAtPhjjtZnfHFEoWBfGV3:MdxgTSrMaIl/jcLijfHFEHWzXvjT85R

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks