Overview

overview

10

Static

static

3

4a1b4820ed...c9.exe

windows7-x64

10

4a1b4820ed...c9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a1b4820ed87b4b9a575fd939d81b0c9

  • Size

    204KB

  • Sample

    240107-3xpmpsgfbq

  • MD5

    4a1b4820ed87b4b9a575fd939d81b0c9

  • SHA1

    b788e8c76979c93f16e3f2161ea810e293585b79

  • SHA256

    25fee910acca2b28edb722ceb539ef9c8bd7b398e0a1c003b6bf4bafddc4807b

  • SHA512

    47e6c8a74e19cad92841b5c7f293a8492135c28283f260872dbd6a5e508dbdeaf4346e1446d2e3e53dd37a36d822d5ca160dcfd3b3aa85165aa6aac90c0f4ecd

  • SSDEEP

    3072:pmRb9GffGv4rPIQJcaitfdE1PYAuUBcK1eIG:342PIKc39diPPcK1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4a1b4820ed87b4b9a575fd939d81b0c9

    • Size

      204KB

    • MD5

      4a1b4820ed87b4b9a575fd939d81b0c9

    • SHA1

      b788e8c76979c93f16e3f2161ea810e293585b79

    • SHA256

      25fee910acca2b28edb722ceb539ef9c8bd7b398e0a1c003b6bf4bafddc4807b

    • SHA512

      47e6c8a74e19cad92841b5c7f293a8492135c28283f260872dbd6a5e508dbdeaf4346e1446d2e3e53dd37a36d822d5ca160dcfd3b3aa85165aa6aac90c0f4ecd

    • SSDEEP

      3072:pmRb9GffGv4rPIQJcaitfdE1PYAuUBcK1eIG:342PIKc39diPPcK1

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks