Overview

overview

10

Static

static

3

2763d79ffd...27.exe

windows7-x64

10

2763d79ffd...27.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2763d79ffd735460fbcb316e4d790927

  • Size

    128KB

  • Sample

    231231-emywmahdg9

  • MD5

    2763d79ffd735460fbcb316e4d790927

  • SHA1

    05e0f45456032792b2e8225c1225027ab473bae9

  • SHA256

    20bb47017705a0c6498528cf57dbc7a3fd83787550cfd9640d30962a0f926719

  • SHA512

    cde98380b454cb0eada3a1c7dc052ce1a58235ff4cb7ce6c4ccf630f3f83f71cb5cb06e8475032052434fa90c62701adc9af05ffd48d8e58d03561512f1d8370

  • SSDEEP

    1536:EjLsi2PhgwuFQFviwd6PXOYb7gUWgWFsEH5NeG0h/E:eLsiGgnFQBtYb7gRsE6M

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2763d79ffd735460fbcb316e4d790927

    • Size

      128KB

    • MD5

      2763d79ffd735460fbcb316e4d790927

    • SHA1

      05e0f45456032792b2e8225c1225027ab473bae9

    • SHA256

      20bb47017705a0c6498528cf57dbc7a3fd83787550cfd9640d30962a0f926719

    • SHA512

      cde98380b454cb0eada3a1c7dc052ce1a58235ff4cb7ce6c4ccf630f3f83f71cb5cb06e8475032052434fa90c62701adc9af05ffd48d8e58d03561512f1d8370

    • SSDEEP

      1536:EjLsi2PhgwuFQFviwd6PXOYb7gUWgWFsEH5NeG0h/E:eLsiGgnFQBtYb7gRsE6M

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks