Overview

overview

10

Static

static

3

307a77a24e...38.exe

windows7-x64

10

307a77a24e...38.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    307a77a24eaf6af0d2986ddf622ce938

  • Size

    212KB

  • Sample

    231225-vw3h6sfab7

  • MD5

    307a77a24eaf6af0d2986ddf622ce938

  • SHA1

    df9ab5c6f5ae1277844feaa6ac7b721c3d05a874

  • SHA256

    6d84bac527c817fae01a3b6739cd21ef7eb79b44f319ea1c5bed92a4789ef718

  • SHA512

    414e5b788da3d3b4d7b0d57a3107e9d1a39263946f1ce9495b5a9a7496f7b0b90308bcfd6cd269f975ed8085c9c295ef7e3d1d844148cfb3e483f8028d1ae228

  • SSDEEP

    6144:ep4VoIrqJQNbufrI4ukDnx/8vtvwzsmMAEu3Wev5kBirl87VFt6En9x7Xf7oufae:ep4ZmGbMrI4ukDnx/8vtvwzsmMAEGHv6

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      307a77a24eaf6af0d2986ddf622ce938

    • Size

      212KB

    • MD5

      307a77a24eaf6af0d2986ddf622ce938

    • SHA1

      df9ab5c6f5ae1277844feaa6ac7b721c3d05a874

    • SHA256

      6d84bac527c817fae01a3b6739cd21ef7eb79b44f319ea1c5bed92a4789ef718

    • SHA512

      414e5b788da3d3b4d7b0d57a3107e9d1a39263946f1ce9495b5a9a7496f7b0b90308bcfd6cd269f975ed8085c9c295ef7e3d1d844148cfb3e483f8028d1ae228

    • SSDEEP

      6144:ep4VoIrqJQNbufrI4ukDnx/8vtvwzsmMAEu3Wev5kBirl87VFt6En9x7Xf7oufae:ep4ZmGbMrI4ukDnx/8vtvwzsmMAEGHv6

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks