Overview

overview

10

Static

static

3

785dd2f67d...c3.exe

windows7-x64

10

785dd2f67d...c3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    785dd2f67d043cb03993a3c8a2af1fc3

  • Size

    184KB

  • Sample

    240126-zrad2sfgbl

  • MD5

    785dd2f67d043cb03993a3c8a2af1fc3

  • SHA1

    d308df6a395c1b970b364487c443d1623ae76a08

  • SHA256

    7846eb79a7adbc2ae133d2570cefea5ab42e741e935e3418329ec3d46cb4e340

  • SHA512

    4a37dff7872da25fc49c5d697a78b9d9ea229aded502fdd6617529d32fe8426178e2d39d21ef2454fca79c17ec1e61eb989e2d7dd6c2e804f707bc7d25a289c5

  • SSDEEP

    3072:DPI4N1cfl/BTyzcM+Knvmb7/D263i4qMbBQhAKIWOD2r1oX1/hcNcfAUane4Ro3z:TL3ClpTFzKnvmb7/D26y4qMSyKbOD2rW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      785dd2f67d043cb03993a3c8a2af1fc3

    • Size

      184KB

    • MD5

      785dd2f67d043cb03993a3c8a2af1fc3

    • SHA1

      d308df6a395c1b970b364487c443d1623ae76a08

    • SHA256

      7846eb79a7adbc2ae133d2570cefea5ab42e741e935e3418329ec3d46cb4e340

    • SHA512

      4a37dff7872da25fc49c5d697a78b9d9ea229aded502fdd6617529d32fe8426178e2d39d21ef2454fca79c17ec1e61eb989e2d7dd6c2e804f707bc7d25a289c5

    • SSDEEP

      3072:DPI4N1cfl/BTyzcM+Knvmb7/D263i4qMbBQhAKIWOD2r1oX1/hcNcfAUane4Ro3z:TL3ClpTFzKnvmb7/D26y4qMSyKbOD2rW

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks