Overview

overview

10

Static

static

3

7d06306b6a...a2.exe

windows7-x64

10

7d06306b6a...a2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d06306b6a04fba8a02edbf3410624a2

  • Size

    280KB

  • Sample

    240128-ntkf9abgaq

  • MD5

    7d06306b6a04fba8a02edbf3410624a2

  • SHA1

    98513cadbf73c45ea0e4f0fe2faa64fc2a6a0205

  • SHA256

    a2708084a07e5f2a81b0b2b8b224da86f8655d33cf31bb6d87c73453755cea67

  • SHA512

    338805d015ac03bbc3f07cf1a3bb1c3bd56c9b0c6d2914db98a1d13d5a24a3a93df8097d62f8e34a58c10decd717132cee94ccccc4aaea7cf127e5d0cac06476

  • SSDEEP

    3072:Da3TiHOPiu8aQb3TqDUCiGjHJDbRv9y+qwa+rZf/MVBXAF:mTiHOq3TqD+0HBb5ta+rZ3MTW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7d06306b6a04fba8a02edbf3410624a2

    • Size

      280KB

    • MD5

      7d06306b6a04fba8a02edbf3410624a2

    • SHA1

      98513cadbf73c45ea0e4f0fe2faa64fc2a6a0205

    • SHA256

      a2708084a07e5f2a81b0b2b8b224da86f8655d33cf31bb6d87c73453755cea67

    • SHA512

      338805d015ac03bbc3f07cf1a3bb1c3bd56c9b0c6d2914db98a1d13d5a24a3a93df8097d62f8e34a58c10decd717132cee94ccccc4aaea7cf127e5d0cac06476

    • SSDEEP

      3072:Da3TiHOPiu8aQb3TqDUCiGjHJDbRv9y+qwa+rZf/MVBXAF:mTiHOq3TqD+0HBb5ta+rZ3MTW

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks