Overview

overview

10

Static

static

3

3507aad330...47.exe

windows7-x64

10

3507aad330...47.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3507aad330851a20a2e5ed184e812f47.exe

  • Size

    228KB

  • Sample

    240102-tcpyasbhf6

  • MD5

    3507aad330851a20a2e5ed184e812f47

  • SHA1

    8565967cf286c774ceab82661aa1a34f80b14e82

  • SHA256

    40bceabd84c21beef6781fbb5bc6c57defe11e6c87744c77f3e322ddc65dc114

  • SHA512

    1ef15972964567fe52eb639ece01c0ae4f0d6c43d8a1e0a52ec4fb553d059065a79cc4d78ed67dd9b39a8bba6f03e35392d9828a5cce750611adb71ec6d0e823

  • SSDEEP

    6144:fm03PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/ASk:fmuPhAmZIH+Ap

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3507aad330851a20a2e5ed184e812f47.exe

    • Size

      228KB

    • MD5

      3507aad330851a20a2e5ed184e812f47

    • SHA1

      8565967cf286c774ceab82661aa1a34f80b14e82

    • SHA256

      40bceabd84c21beef6781fbb5bc6c57defe11e6c87744c77f3e322ddc65dc114

    • SHA512

      1ef15972964567fe52eb639ece01c0ae4f0d6c43d8a1e0a52ec4fb553d059065a79cc4d78ed67dd9b39a8bba6f03e35392d9828a5cce750611adb71ec6d0e823

    • SSDEEP

      6144:fm03PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/ASk:fmuPhAmZIH+Ap

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks