Overview

overview

10

Static

static

3

778d64fdb2...30.exe

windows7-x64

10

778d64fdb2...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    778d64fdb29e30cd9a08688cf2ef3230

  • Size

    96KB

  • Sample

    240126-rb8mxafcf7

  • MD5

    778d64fdb29e30cd9a08688cf2ef3230

  • SHA1

    d3f4d20e464802c58895f8644a097763fa9f893f

  • SHA256

    4be424dfcbf8f7d95d8c4e15aa046b93963dae1217e57ae605bc1b00855e2297

  • SHA512

    6eea8260b910e9e88fbe30220d2f8ad0f696c37bee67aa19e5e035605d16674905679dd47816f83f31271fa2deffb0685a9596337331e027cea93067b0ad1ea7

  • SSDEEP

    1536:drhBH9f6cOahh9kGulSc16l6u+NMMl/KlYv1T4hThFgNIjnZ2n:Bvh0lu88FFgCn4n

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      778d64fdb29e30cd9a08688cf2ef3230

    • Size

      96KB

    • MD5

      778d64fdb29e30cd9a08688cf2ef3230

    • SHA1

      d3f4d20e464802c58895f8644a097763fa9f893f

    • SHA256

      4be424dfcbf8f7d95d8c4e15aa046b93963dae1217e57ae605bc1b00855e2297

    • SHA512

      6eea8260b910e9e88fbe30220d2f8ad0f696c37bee67aa19e5e035605d16674905679dd47816f83f31271fa2deffb0685a9596337331e027cea93067b0ad1ea7

    • SSDEEP

      1536:drhBH9f6cOahh9kGulSc16l6u+NMMl/KlYv1T4hThFgNIjnZ2n:Bvh0lu88FFgCn4n

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks