Overview

overview

10

Static

static

3

72e1c0c6a6...01.exe

windows7-x64

10

72e1c0c6a6...01.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72e1c0c6a65b1cd70b621c764ad7d701

  • Size

    180KB

  • Sample

    240124-z61jsahdck

  • MD5

    72e1c0c6a65b1cd70b621c764ad7d701

  • SHA1

    83ab9e03f5af4de258df6d66d36a37a1979fad2e

  • SHA256

    c1b2e82ea214888a1869ca21ce06f86acc8a017c869467bb6695b61552475daf

  • SHA512

    1f8145a3486279ce078f72d4016b697fdcecdf7a59e8935c47b9689bd6146c1fe07237831f6dbc0244a06d388fa9272e5f03e3c0e890ce7b772a9cd38c2bbf7e

  • SSDEEP

    3072:PdigmIxtE8EjRBlC6SVcMGjFRRwpf7HNREcutaw8NQwBx61tMXSmBY/rulkcUJ/9:pmIxtE8EjRBlC6SVcMGjFRRwpf7HNREs

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      72e1c0c6a65b1cd70b621c764ad7d701

    • Size

      180KB

    • MD5

      72e1c0c6a65b1cd70b621c764ad7d701

    • SHA1

      83ab9e03f5af4de258df6d66d36a37a1979fad2e

    • SHA256

      c1b2e82ea214888a1869ca21ce06f86acc8a017c869467bb6695b61552475daf

    • SHA512

      1f8145a3486279ce078f72d4016b697fdcecdf7a59e8935c47b9689bd6146c1fe07237831f6dbc0244a06d388fa9272e5f03e3c0e890ce7b772a9cd38c2bbf7e

    • SSDEEP

      3072:PdigmIxtE8EjRBlC6SVcMGjFRRwpf7HNREcutaw8NQwBx61tMXSmBY/rulkcUJ/9:pmIxtE8EjRBlC6SVcMGjFRRwpf7HNREs

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks