Overview

overview

10

Static

static

3

7977859237...90.exe

windows7-x64

10

7977859237...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7977859237113cbe564e98489fe93d90

  • Size

    204KB

  • Sample

    231226-s2wxgadfdq

  • MD5

    7977859237113cbe564e98489fe93d90

  • SHA1

    3a3bb8c8bbd4da6433160135f08573b0e5d91b6f

  • SHA256

    8e23e8ede6b90077a96851018627ea0905748ea1cf7c1fe0ea8c2da463541855

  • SHA512

    718a86cc0464288e4ca819f04d7b6046b2dbba78cb34c8815eaccdcc7837bc31ed19201aafb8c5857336676dc20db77131b8c6918a865cfb05f37f72fef1320c

  • SSDEEP

    3072:NVeLCGNpuU+mzihKh8wpzDqulR3X9sDpLg6ZGKIXeYnVlDY:NVekEV82llbs1g6+XbVS

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7977859237113cbe564e98489fe93d90

    • Size

      204KB

    • MD5

      7977859237113cbe564e98489fe93d90

    • SHA1

      3a3bb8c8bbd4da6433160135f08573b0e5d91b6f

    • SHA256

      8e23e8ede6b90077a96851018627ea0905748ea1cf7c1fe0ea8c2da463541855

    • SHA512

      718a86cc0464288e4ca819f04d7b6046b2dbba78cb34c8815eaccdcc7837bc31ed19201aafb8c5857336676dc20db77131b8c6918a865cfb05f37f72fef1320c

    • SSDEEP

      3072:NVeLCGNpuU+mzihKh8wpzDqulR3X9sDpLg6ZGKIXeYnVlDY:NVekEV82llbs1g6+XbVS

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks