Overview

overview

10

Static

static

3

18bb27dbe1...11.exe

windows7-x64

10

18bb27dbe1...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18bb27dbe13373b66d7cff8be4e97811

  • Size

    152KB

  • Sample

    231230-ptcbbacaf4

  • MD5

    18bb27dbe13373b66d7cff8be4e97811

  • SHA1

    8574a6480bf394c8d02a4320e53e0938517063dd

  • SHA256

    43a9b3dacfa6b17220acc9661eef49ba666377ccb95bd7741055f0748c0977eb

  • SHA512

    ab88862b553584ce7862570dc8ba261409143c6f250564e0bdf2717cd5e6dcb3776dd73fe7e77e936a912770058845e7115f37792225778fe03987d3c85b2ff0

  • SSDEEP

    3072:JtDgFjCmeGMS6WLI3kTB58hahpkzFhPAOJ0NAW/pP4oQZiEzs:E+meGMS6Wc3kn9ADPAOJ0NJvWS

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      18bb27dbe13373b66d7cff8be4e97811

    • Size

      152KB

    • MD5

      18bb27dbe13373b66d7cff8be4e97811

    • SHA1

      8574a6480bf394c8d02a4320e53e0938517063dd

    • SHA256

      43a9b3dacfa6b17220acc9661eef49ba666377ccb95bd7741055f0748c0977eb

    • SHA512

      ab88862b553584ce7862570dc8ba261409143c6f250564e0bdf2717cd5e6dcb3776dd73fe7e77e936a912770058845e7115f37792225778fe03987d3c85b2ff0

    • SSDEEP

      3072:JtDgFjCmeGMS6WLI3kTB58hahpkzFhPAOJ0NAW/pP4oQZiEzs:E+meGMS6Wc3kn9ADPAOJ0NJvWS

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks