Overview

overview

10

Static

static

3

03076627bc...6e.exe

windows7-x64

10

03076627bc...6e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    03076627bcfe791dd015008c1c3b866e

  • Size

    208KB

  • Sample

    231229-y69a9acaak

  • MD5

    03076627bcfe791dd015008c1c3b866e

  • SHA1

    cc6714080568e9838b11f300ce57eda2a86f91f8

  • SHA256

    1f1f37157566b07e74e015099a56348dc8ed45248ae2d6b8acf6201f71e62efa

  • SHA512

    287eadda2139618a179cbab4c88530487b5ef7f2baf45b46b5163c82dba79a035a1d44a624fd4956a43cc9a83a9d4155cca247ed4808bfe55ec2988b502efda0

  • SSDEEP

    6144:MoZrsWuQmToYfPeffkxsthVIVO+b/RnmbT4PW9UmE7ldESgvSAOuVwX:MUfuQmToYfPeffkxsthVIVO+b/9mbkPj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      03076627bcfe791dd015008c1c3b866e

    • Size

      208KB

    • MD5

      03076627bcfe791dd015008c1c3b866e

    • SHA1

      cc6714080568e9838b11f300ce57eda2a86f91f8

    • SHA256

      1f1f37157566b07e74e015099a56348dc8ed45248ae2d6b8acf6201f71e62efa

    • SHA512

      287eadda2139618a179cbab4c88530487b5ef7f2baf45b46b5163c82dba79a035a1d44a624fd4956a43cc9a83a9d4155cca247ed4808bfe55ec2988b502efda0

    • SSDEEP

      6144:MoZrsWuQmToYfPeffkxsthVIVO+b/RnmbT4PW9UmE7ldESgvSAOuVwX:MUfuQmToYfPeffkxsthVIVO+b/9mbkPj

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks