Overview

overview

10

Static

static

3

fb227cea12...a1.exe

windows7-x64

10

fb227cea12...a1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb227cea125ea34bc8466b9ab2625fa1

  • Size

    68KB

  • Sample

    231228-1v3ensfag8

  • MD5

    fb227cea125ea34bc8466b9ab2625fa1

  • SHA1

    c2c61e18d1ea39e56473f1099dc5f93ad2a51988

  • SHA256

    786ba48d5bc8833a933eaa85dbf5ed3c8bf59af7c210c4625968b5ce994a1e07

  • SHA512

    4865622759b08ad0da179e89bf533d2870547990c6cd03d3b114ad8e671878a7ce57eb2dd66d4154dcb22b61b3f5902469a47e69420aff648614d134b47216e2

  • SSDEEP

    768:tj9Qmo+O5LU0dcxmJUMncu/VLHpFIkid+JFIkNcr9fLkWEUYn6sNpcspj6W8Lx42:tj9Qd+QvgM/AQmSNFONMlszAjUkx1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fb227cea125ea34bc8466b9ab2625fa1

    • Size

      68KB

    • MD5

      fb227cea125ea34bc8466b9ab2625fa1

    • SHA1

      c2c61e18d1ea39e56473f1099dc5f93ad2a51988

    • SHA256

      786ba48d5bc8833a933eaa85dbf5ed3c8bf59af7c210c4625968b5ce994a1e07

    • SHA512

      4865622759b08ad0da179e89bf533d2870547990c6cd03d3b114ad8e671878a7ce57eb2dd66d4154dcb22b61b3f5902469a47e69420aff648614d134b47216e2

    • SSDEEP

      768:tj9Qmo+O5LU0dcxmJUMncu/VLHpFIkid+JFIkNcr9fLkWEUYn6sNpcspj6W8Lx42:tj9Qd+QvgM/AQmSNFONMlszAjUkx1

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks