Overview

overview

10

Static

static

3

7d81841341...7f.exe

windows7-x64

10

7d81841341...7f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7d81841341165043514b8d2e9ea8bd7f

  • Size

    268KB

  • Sample

    240128-verqcaeaf8

  • MD5

    7d81841341165043514b8d2e9ea8bd7f

  • SHA1

    805341f7cbd81962085bb9c7ac7b1b2555b70cc7

  • SHA256

    7e5713eb5d1a9eff753dcd22edc5fef59545424cc76ee63dcaa76b0f98d6a933

  • SHA512

    c07976b479eb8acef226ce24eabe5eb733dffb571c2d1675a772bcaab4f345bd3eddb23328283a57158c32e918bc7dccb715155a79517af54ef87c7fe994bc2e

  • SSDEEP

    3072:aE3gfDPIbpQGchky5kQFFf4JeTSqZ/ckRwdQ6fCZZw12Y05+0ZjC+McQhT4qo4ll:asuqWGAXlS4VRwdQ0cdSrr4

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7d81841341165043514b8d2e9ea8bd7f

    • Size

      268KB

    • MD5

      7d81841341165043514b8d2e9ea8bd7f

    • SHA1

      805341f7cbd81962085bb9c7ac7b1b2555b70cc7

    • SHA256

      7e5713eb5d1a9eff753dcd22edc5fef59545424cc76ee63dcaa76b0f98d6a933

    • SHA512

      c07976b479eb8acef226ce24eabe5eb733dffb571c2d1675a772bcaab4f345bd3eddb23328283a57158c32e918bc7dccb715155a79517af54ef87c7fe994bc2e

    • SSDEEP

      3072:aE3gfDPIbpQGchky5kQFFf4JeTSqZ/ckRwdQ6fCZZw12Y05+0ZjC+McQhT4qo4ll:asuqWGAXlS4VRwdQ0cdSrr4

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks