Overview

overview

10

Static

static

3

0389f57bc6...18.exe

windows7-x64

10

0389f57bc6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0389f57bc63f8d7a3eeec1ed28c98018

  • Size

    260KB

  • Sample

    231229-zj6ghsfdhq

  • MD5

    0389f57bc63f8d7a3eeec1ed28c98018

  • SHA1

    e7b984fb42c9f176dd2271301833a0063339b12b

  • SHA256

    57fa6e998a90fb803670966f681825a55155f9f9d0d15b71b4036fd50360b9c1

  • SHA512

    170f13061e661d14564f813858d25f570b7a842bba6cc26c6d6639260fd5026719837bd22e26f1c784bc6700fa359786626a741718b0076e2cc5fcaad2f49883

  • SSDEEP

    3072:5w9eiIx/uPiE64j9a45Kf/4xLMfKdRR7yH3TFavCPQjIYQHCd8boxQVV/V3xGQZ:+UuP/6qKWmH3TFCCoNLx+VZ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0389f57bc63f8d7a3eeec1ed28c98018

    • Size

      260KB

    • MD5

      0389f57bc63f8d7a3eeec1ed28c98018

    • SHA1

      e7b984fb42c9f176dd2271301833a0063339b12b

    • SHA256

      57fa6e998a90fb803670966f681825a55155f9f9d0d15b71b4036fd50360b9c1

    • SHA512

      170f13061e661d14564f813858d25f570b7a842bba6cc26c6d6639260fd5026719837bd22e26f1c784bc6700fa359786626a741718b0076e2cc5fcaad2f49883

    • SSDEEP

      3072:5w9eiIx/uPiE64j9a45Kf/4xLMfKdRR7yH3TFavCPQjIYQHCd8boxQVV/V3xGQZ:+UuP/6qKWmH3TFCCoNLx+VZ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks