Overview

overview

10

Static

static

3

00b462f5b0...f3.exe

windows7-x64

10

00b462f5b0...f3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00b462f5b0e1bd024e4baa33af32bdf3.exe

  • Size

    100KB

  • Sample

    240103-sazjaaheh9

  • MD5

    00b462f5b0e1bd024e4baa33af32bdf3

  • SHA1

    36b8d8c946e46872554903b35f165ffabcb3e799

  • SHA256

    713208bdc34595edd37e07a36190645c562d1a7177ccc4e85366d93711d98967

  • SHA512

    09ae6f105ef8d3993a9056930fcd1b090aba6805216bebb01cb165c5adfbae3acf6d2a747a367774e6db64fdb92953e25047e314599361bdafb3ba74352c2e85

  • SSDEEP

    1536:6jd/Yy9ddd7Y1idNzL7zdddXOpdxCTkUjW/dQqdUxpkddAd3nddd4od5ddMk5dSj:OKez7vr6EFJ0T72mBT

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      00b462f5b0e1bd024e4baa33af32bdf3.exe

    • Size

      100KB

    • MD5

      00b462f5b0e1bd024e4baa33af32bdf3

    • SHA1

      36b8d8c946e46872554903b35f165ffabcb3e799

    • SHA256

      713208bdc34595edd37e07a36190645c562d1a7177ccc4e85366d93711d98967

    • SHA512

      09ae6f105ef8d3993a9056930fcd1b090aba6805216bebb01cb165c5adfbae3acf6d2a747a367774e6db64fdb92953e25047e314599361bdafb3ba74352c2e85

    • SSDEEP

      1536:6jd/Yy9ddd7Y1idNzL7zdddXOpdxCTkUjW/dQqdUxpkddAd3nddd4od5ddMk5dSj:OKez7vr6EFJ0T72mBT

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks