Overview

overview

10

Static

static

3

532f55176b...e0.exe

windows7-x64

10

532f55176b...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    532f55176bb3d6b090057ea7e43e80e0

  • Size

    92KB

  • Sample

    231226-ettv9addc8

  • MD5

    532f55176bb3d6b090057ea7e43e80e0

  • SHA1

    74dd47633bf45c17490eaa55b28bb201f155810e

  • SHA256

    7c953bf4664ba1cb0cc2b1a125bb0542112c09bc0820d1817a5d146f07262f50

  • SHA512

    6d26e831e2ab3f24e9aa2015d70698cfff26fb11f5c4fc545bada4c2701512c4a8f9f67f68ce2933dc930dd628634f84f3e15ad3f1066a6bd687d486e2380ffd

  • SSDEEP

    1536:LpiP7hPjjBkvWN/3HgGl+HJpwFJ0T72mocT:t07/HMQFJ0T72mBT

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      532f55176bb3d6b090057ea7e43e80e0

    • Size

      92KB

    • MD5

      532f55176bb3d6b090057ea7e43e80e0

    • SHA1

      74dd47633bf45c17490eaa55b28bb201f155810e

    • SHA256

      7c953bf4664ba1cb0cc2b1a125bb0542112c09bc0820d1817a5d146f07262f50

    • SHA512

      6d26e831e2ab3f24e9aa2015d70698cfff26fb11f5c4fc545bada4c2701512c4a8f9f67f68ce2933dc930dd628634f84f3e15ad3f1066a6bd687d486e2380ffd

    • SSDEEP

      1536:LpiP7hPjjBkvWN/3HgGl+HJpwFJ0T72mocT:t07/HMQFJ0T72mBT

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks