Overview

overview

10

Static

static

3

190f773ed3...19.exe

windows7-x64

10

190f773ed3...19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    190f773ed3d95bbfa29183b62a313a19

  • Size

    84KB

  • Sample

    231230-p27r7adhf7

  • MD5

    190f773ed3d95bbfa29183b62a313a19

  • SHA1

    0c803d3076f01ef6c7e8cd7fb214d62e5f4e67a6

  • SHA256

    52b2a6a77bd992153e61d2be90152fe7c6f045c4411c5fdce15d55aef47146b3

  • SHA512

    1718f3bc1f7a2d6898b25e7d2d8bb083189ae743e8e216507b7c8a74aa3bbfd9a6c3c8a6a503d321fd7c9c650b5f591c040e59d8062e7425919222a77d2b909a

  • SSDEEP

    768:DyV+hOvEfswzDvgokIWi3KEyUhL7b7Yqlf4JwQltjmtTBHi7Alf:DoFv+jd76Ezh/vYlJwAitTB3lf

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      190f773ed3d95bbfa29183b62a313a19

    • Size

      84KB

    • MD5

      190f773ed3d95bbfa29183b62a313a19

    • SHA1

      0c803d3076f01ef6c7e8cd7fb214d62e5f4e67a6

    • SHA256

      52b2a6a77bd992153e61d2be90152fe7c6f045c4411c5fdce15d55aef47146b3

    • SHA512

      1718f3bc1f7a2d6898b25e7d2d8bb083189ae743e8e216507b7c8a74aa3bbfd9a6c3c8a6a503d321fd7c9c650b5f591c040e59d8062e7425919222a77d2b909a

    • SSDEEP

      768:DyV+hOvEfswzDvgokIWi3KEyUhL7b7Yqlf4JwQltjmtTBHi7Alf:DoFv+jd76Ezh/vYlJwAitTB3lf

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks