Overview

overview

10

Static

static

3

4a5e5144bf...66.exe

windows7-x64

10

4a5e5144bf...66.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4a5e5144bffdd404b3f28c55d4cc2066

  • Size

    312KB

  • Sample

    240108-efa6zsbfd9

  • MD5

    4a5e5144bffdd404b3f28c55d4cc2066

  • SHA1

    f10998e32fef82e946a1b92498fc79b91a191a73

  • SHA256

    0b24b03556108e007bc2f1e8be254207ff4285b83cff9908c114ab5ae7103705

  • SHA512

    90ab6d8bd2af3a1a2449a32c72211a66330cd47cddea48c40dac22541c3e81150a092a77a24b1ebdbe4242105fae37afdfb3a0e96242f5f801fc4b8a074ddc10

  • SSDEEP

    6144:U0Jcq9XpSuhRjAfpVzs+txf3myzc9f35Q67l1tR0CugEv5CkFn:fJr9XpSuhR0fDs+tUsc9f3b3BrEBln

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4a5e5144bffdd404b3f28c55d4cc2066

    • Size

      312KB

    • MD5

      4a5e5144bffdd404b3f28c55d4cc2066

    • SHA1

      f10998e32fef82e946a1b92498fc79b91a191a73

    • SHA256

      0b24b03556108e007bc2f1e8be254207ff4285b83cff9908c114ab5ae7103705

    • SHA512

      90ab6d8bd2af3a1a2449a32c72211a66330cd47cddea48c40dac22541c3e81150a092a77a24b1ebdbe4242105fae37afdfb3a0e96242f5f801fc4b8a074ddc10

    • SSDEEP

      6144:U0Jcq9XpSuhRjAfpVzs+txf3myzc9f35Q67l1tR0CugEv5CkFn:fJr9XpSuhR0fDs+tUsc9f3b3BrEBln

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks