Overview

overview

10

Static

static

3

53a9c8b23e...c1.exe

windows7-x64

10

53a9c8b23e...c1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    53a9c8b23eb4708b5a9d29266fd881c1.exe

  • Size

    88KB

  • Sample

    240111-y2k3vsgea3

  • MD5

    53a9c8b23eb4708b5a9d29266fd881c1

  • SHA1

    1b8987670d11769b693ed9fc62473114b355d55b

  • SHA256

    a314885312d245d0ba78b37b0a11ad2d37230f92fe8d6c3b67ee6effd11d4375

  • SHA512

    3778f79110f6349b83e27fb0ad0f90fa1cc56a0cb0023b3699de92ef542925d0d3bef2324c9c3984159393aabe98a77970c844160622fca05b605ffd9c60ca01

  • SSDEEP

    1536:u1INp1Spy8tXG06YpqdXTsYJ/F+FBFIFGFYF7DUZxTZHva:PNzSs0G0mZ2S

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      53a9c8b23eb4708b5a9d29266fd881c1.exe

    • Size

      88KB

    • MD5

      53a9c8b23eb4708b5a9d29266fd881c1

    • SHA1

      1b8987670d11769b693ed9fc62473114b355d55b

    • SHA256

      a314885312d245d0ba78b37b0a11ad2d37230f92fe8d6c3b67ee6effd11d4375

    • SHA512

      3778f79110f6349b83e27fb0ad0f90fa1cc56a0cb0023b3699de92ef542925d0d3bef2324c9c3984159393aabe98a77970c844160622fca05b605ffd9c60ca01

    • SSDEEP

      1536:u1INp1Spy8tXG06YpqdXTsYJ/F+FBFIFGFYF7DUZxTZHva:PNzSs0G0mZ2S

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks