Overview

overview

10

Static

static

3

7529babe2d...91.exe

windows7-x64

10

7529babe2d...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7529babe2d26fe59fdad435594befd91

  • Size

    48KB

  • Sample

    240125-wnemtacda5

  • MD5

    7529babe2d26fe59fdad435594befd91

  • SHA1

    c1c5e1b70ba94ee4a8e7f365c80dfd8abe297250

  • SHA256

    4ffb4c60ef8649fdb11e0ed86fab9df6e6b34ea1e86417aca1eb9e5ae7f61464

  • SHA512

    fab659ca1a11182434d60c2a2b4b98002312a05bae1b1bf4290b69c771cfddc23f259489ce19bbd047795918606bb2d0afaa67ffa613b2ee86669be4713e623c

  • SSDEEP

    768:26NEhmqg90TiUv+6wH9H7MfygXaDMFQXD7e:26amLDC6NNDsQXD7

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7529babe2d26fe59fdad435594befd91

    • Size

      48KB

    • MD5

      7529babe2d26fe59fdad435594befd91

    • SHA1

      c1c5e1b70ba94ee4a8e7f365c80dfd8abe297250

    • SHA256

      4ffb4c60ef8649fdb11e0ed86fab9df6e6b34ea1e86417aca1eb9e5ae7f61464

    • SHA512

      fab659ca1a11182434d60c2a2b4b98002312a05bae1b1bf4290b69c771cfddc23f259489ce19bbd047795918606bb2d0afaa67ffa613b2ee86669be4713e623c

    • SSDEEP

      768:26NEhmqg90TiUv+6wH9H7MfygXaDMFQXD7e:26amLDC6NNDsQXD7

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks