Overview

overview

10

Static

static

3

551835cba9...4c.exe

windows7-x64

10

551835cba9...4c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    551835cba9b3ff9ca2ef016a73bdec4c

  • Size

    116KB

  • Sample

    240112-bn5h1scge3

  • MD5

    551835cba9b3ff9ca2ef016a73bdec4c

  • SHA1

    74139441bb83f5575a3717354287774223265cef

  • SHA256

    53ff5c88b101db186d623d96b7d85495868cc272729cc9c005fd42a6e262379b

  • SHA512

    e2f8361e78df397ce23985ea3cfa00a644e2692f3858fae8d5a329495b356265e834ca4af670b46c1543ea3ef4391be95d83267c9b5cfd425d93803ad30241c4

  • SSDEEP

    3072:4v7777777777777777V7777777777777777777LL30N:E3S

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      551835cba9b3ff9ca2ef016a73bdec4c

    • Size

      116KB

    • MD5

      551835cba9b3ff9ca2ef016a73bdec4c

    • SHA1

      74139441bb83f5575a3717354287774223265cef

    • SHA256

      53ff5c88b101db186d623d96b7d85495868cc272729cc9c005fd42a6e262379b

    • SHA512

      e2f8361e78df397ce23985ea3cfa00a644e2692f3858fae8d5a329495b356265e834ca4af670b46c1543ea3ef4391be95d83267c9b5cfd425d93803ad30241c4

    • SSDEEP

      3072:4v7777777777777777V7777777777777777777LL30N:E3S

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks