Overview

overview

10

Static

static

3

59e78608af...70.exe

windows7-x64

10

59e78608af...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59e78608af9f3ef0ece5d2d8c17b8b70

  • Size

    152KB

  • Sample

    240114-brerrsadf2

  • MD5

    59e78608af9f3ef0ece5d2d8c17b8b70

  • SHA1

    3ab1f7960b7f4a8382ae1de53c70b976feb17d3d

  • SHA256

    50ccd555e7c99ff99150c25b86aa3da84eae75d298ff4febbbb951abe7d54b5e

  • SHA512

    793ffd43f6bf18e8e5e9ddbef87abdf4b2192d57bfec35fb353614db652d9c656a3ab1322ba5ff49cae5e510838b75280964e760da1122ed17d810a56b28899d

  • SSDEEP

    3072:iqQRuPjYh8SZVy+7DtJUbaxIuzfydpBu++u3:+g+7Dt7bydR

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      59e78608af9f3ef0ece5d2d8c17b8b70

    • Size

      152KB

    • MD5

      59e78608af9f3ef0ece5d2d8c17b8b70

    • SHA1

      3ab1f7960b7f4a8382ae1de53c70b976feb17d3d

    • SHA256

      50ccd555e7c99ff99150c25b86aa3da84eae75d298ff4febbbb951abe7d54b5e

    • SHA512

      793ffd43f6bf18e8e5e9ddbef87abdf4b2192d57bfec35fb353614db652d9c656a3ab1322ba5ff49cae5e510838b75280964e760da1122ed17d810a56b28899d

    • SSDEEP

      3072:iqQRuPjYh8SZVy+7DtJUbaxIuzfydpBu++u3:+g+7Dt7bydR

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks