Overview

overview

10

Static

static

3

46e2a44ad0...c2.exe

windows7-x64

10

46e2a44ad0...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46e2a44ad003b73fe87e8273949b3ac2

  • Size

    248KB

  • Sample

    231226-aycejseefk

  • MD5

    46e2a44ad003b73fe87e8273949b3ac2

  • SHA1

    9d6fe19cce46e6cf9c3acf1dddfc1147d50a1755

  • SHA256

    34e723d04cad4e6566454837ca5e950e32166a5ba8f06aca5e38efac6aca494e

  • SHA512

    8db160607f91ebbce63ec675e467a2cf68ddce901f0c7c75b9c70d119bd298d12738423f44f9ae6b77c99dd8979ff0f885b0b3df97c524cc57cf5c9166135efc

  • SSDEEP

    3072:+R4z/dJvRDFD1yPBYEmaHtGG2gqZ+/9A+JRjKY5Md41gfy27:PJh1yPptGG2gqZ+FfKqDsX

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      46e2a44ad003b73fe87e8273949b3ac2

    • Size

      248KB

    • MD5

      46e2a44ad003b73fe87e8273949b3ac2

    • SHA1

      9d6fe19cce46e6cf9c3acf1dddfc1147d50a1755

    • SHA256

      34e723d04cad4e6566454837ca5e950e32166a5ba8f06aca5e38efac6aca494e

    • SHA512

      8db160607f91ebbce63ec675e467a2cf68ddce901f0c7c75b9c70d119bd298d12738423f44f9ae6b77c99dd8979ff0f885b0b3df97c524cc57cf5c9166135efc

    • SSDEEP

      3072:+R4z/dJvRDFD1yPBYEmaHtGG2gqZ+/9A+JRjKY5Md41gfy27:PJh1yPptGG2gqZ+FfKqDsX

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks