Overview

overview

10

Static

static

3

2d5a30f195...b9.exe

windows7-x64

10

2d5a30f195...b9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d5a30f19568ffeb5a8488259d8988b9

  • Size

    162KB

  • Sample

    231231-h9551aabd8

  • MD5

    2d5a30f19568ffeb5a8488259d8988b9

  • SHA1

    c19dca9307b8f6b58cbb49bb0e42975126d51774

  • SHA256

    ca4eae72413ad5003a20a9f8cf4cc901069e7b55296b53cd35b2c790dca25b0f

  • SHA512

    f74c8389a54b3135161654f20b9baabd1516947d2288d9bf30bd1347e1f50e43c9506ffb4b8423a82671fb465267bd32e02cbea066cd3abef4ec8fbda34cd663

  • SSDEEP

    3072:6krzcnARu9I9KQcJJ78IrDlq2RzFq247DCLTzltNSFN9b23y0PEOmuHw794rK9f6:6oiAgI9KQcJJ78IrDlq2RzFq247DCLTY

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2d5a30f19568ffeb5a8488259d8988b9

    • Size

      162KB

    • MD5

      2d5a30f19568ffeb5a8488259d8988b9

    • SHA1

      c19dca9307b8f6b58cbb49bb0e42975126d51774

    • SHA256

      ca4eae72413ad5003a20a9f8cf4cc901069e7b55296b53cd35b2c790dca25b0f

    • SHA512

      f74c8389a54b3135161654f20b9baabd1516947d2288d9bf30bd1347e1f50e43c9506ffb4b8423a82671fb465267bd32e02cbea066cd3abef4ec8fbda34cd663

    • SSDEEP

      3072:6krzcnARu9I9KQcJJ78IrDlq2RzFq247DCLTzltNSFN9b23y0PEOmuHw794rK9f6:6oiAgI9KQcJJ78IrDlq2RzFq247DCLTY

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks