Overview

overview

10

Static

static

3

5ad0d2bbbf...2b.exe

windows7-x64

10

5ad0d2bbbf...2b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ad0d2bbbf8af4d39c03ecee0eb3572b

  • Size

    228KB

  • Sample

    240114-kr9ftagbh5

  • MD5

    5ad0d2bbbf8af4d39c03ecee0eb3572b

  • SHA1

    d4d08194ac46d819149eebd5bd2c4dadf5dc0951

  • SHA256

    45447b235f22602853d710d75deba968b9a9e60f565313a742a2ac89bab4d91b

  • SHA512

    1c6374fb45a4f6f9f6092a59e16e5deb0cbbe9fec0a75f2952e14429ff1d54d7274958ef4ccf974408814c9f3d6290d82a8a82eced9a3d2e37b0d5e21b7f4f25

  • SSDEEP

    6144:DmwO3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/7SE:Dmw8PhAmZIH+7x

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5ad0d2bbbf8af4d39c03ecee0eb3572b

    • Size

      228KB

    • MD5

      5ad0d2bbbf8af4d39c03ecee0eb3572b

    • SHA1

      d4d08194ac46d819149eebd5bd2c4dadf5dc0951

    • SHA256

      45447b235f22602853d710d75deba968b9a9e60f565313a742a2ac89bab4d91b

    • SHA512

      1c6374fb45a4f6f9f6092a59e16e5deb0cbbe9fec0a75f2952e14429ff1d54d7274958ef4ccf974408814c9f3d6290d82a8a82eced9a3d2e37b0d5e21b7f4f25

    • SSDEEP

      6144:DmwO3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/7SE:Dmw8PhAmZIH+7x

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks