Overview

overview

10

Static

static

3

0c3d99b01e...5e.exe

windows7-x64

10

0c3d99b01e...5e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c3d99b01ec0e98d5a690e6b042cea5e

  • Size

    248KB

  • Sample

    231230-ddqyzsffgj

  • MD5

    0c3d99b01ec0e98d5a690e6b042cea5e

  • SHA1

    b75f311874c60656924f652b22e29c9b3d0c3ac5

  • SHA256

    6b7f29a7c1092406ea5bf9a0ed12014f4eb335d520ec6e657cc4b933e274992d

  • SHA512

    a99bf6657d8e158bdcb78152f2e0ab8d355ea4f4a1b58ef3f550c924269bc69311e7bdc475d84758188c5eccd828a1bcd225da9221a0e098f8417f990b1761e8

  • SSDEEP

    6144:5i1oZYH9MSmzaVZz8rRoo681RV+b3Fa81wkrX++98WSAelGo8hcwTLGhw:5i8YdnmzthTQTgpkrOor

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0c3d99b01ec0e98d5a690e6b042cea5e

    • Size

      248KB

    • MD5

      0c3d99b01ec0e98d5a690e6b042cea5e

    • SHA1

      b75f311874c60656924f652b22e29c9b3d0c3ac5

    • SHA256

      6b7f29a7c1092406ea5bf9a0ed12014f4eb335d520ec6e657cc4b933e274992d

    • SHA512

      a99bf6657d8e158bdcb78152f2e0ab8d355ea4f4a1b58ef3f550c924269bc69311e7bdc475d84758188c5eccd828a1bcd225da9221a0e098f8417f990b1761e8

    • SSDEEP

      6144:5i1oZYH9MSmzaVZz8rRoo681RV+b3Fa81wkrX++98WSAelGo8hcwTLGhw:5i8YdnmzthTQTgpkrOor

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks