Overview

overview

10

Static

static

3

76edbba855...46.exe

windows7-x64

10

76edbba855...46.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76edbba8555c0834fd1d7550390c6d46

  • Size

    172KB

  • Sample

    240126-kv7fmabebp

  • MD5

    76edbba8555c0834fd1d7550390c6d46

  • SHA1

    9a7c063fdb5240f5d99bb450e643a826f5679a55

  • SHA256

    6d29c0e19b124ae76ceaf05011c53fa8650e44265736ea6ca3e2c65803098671

  • SHA512

    699f6247c67bba3e8ae50e5116ff9b1c6c448b0d518883f979647f6a672e867bbde9027887f7a0ef9a63917140d3727f88bfc9adcdcc851b913f65b3e6d4b21c

  • SSDEEP

    3072:u4S66bHvePF35P4Ifzdp31vTYMzc7P1KQ/ruNH29Kq7Spm4+VerOMoxS/oylL:uSqHv6P4IfzdpFvTYMzc7P1K4ruNW9Ki

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      76edbba8555c0834fd1d7550390c6d46

    • Size

      172KB

    • MD5

      76edbba8555c0834fd1d7550390c6d46

    • SHA1

      9a7c063fdb5240f5d99bb450e643a826f5679a55

    • SHA256

      6d29c0e19b124ae76ceaf05011c53fa8650e44265736ea6ca3e2c65803098671

    • SHA512

      699f6247c67bba3e8ae50e5116ff9b1c6c448b0d518883f979647f6a672e867bbde9027887f7a0ef9a63917140d3727f88bfc9adcdcc851b913f65b3e6d4b21c

    • SSDEEP

      3072:u4S66bHvePF35P4Ifzdp31vTYMzc7P1KQ/ruNH29Kq7Spm4+VerOMoxS/oylL:uSqHv6P4IfzdpFvTYMzc7P1K4ruNW9Ki

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks