Overview

overview

10

Static

static

3

7f724f16e1...4e.exe

windows7-x64

10

7f724f16e1...4e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f724f16e198623f22bce89fa06d8c4e

  • Size

    216KB

  • Sample

    240129-k3vrssede3

  • MD5

    7f724f16e198623f22bce89fa06d8c4e

  • SHA1

    3fa152bc31516cfb650b922437862cd9ae41bc64

  • SHA256

    53a8ce69fa26961c132151a90a3acf2681f4b7c9960813d9a8a41b6b83e4561e

  • SHA512

    beba08f2a0e4de82e74086266060a8bd731a250e5f4a123d923ce5a847ed9f26123acab7716ea049ae8b6b631beb52ac8f992da711f4ab195ae932272da7d514

  • SSDEEP

    3072:SFvdCkdoHFGFooobAqzNOEbOKZbtpGPsLxN:SFv0NPseNmKJtpLN

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7f724f16e198623f22bce89fa06d8c4e

    • Size

      216KB

    • MD5

      7f724f16e198623f22bce89fa06d8c4e

    • SHA1

      3fa152bc31516cfb650b922437862cd9ae41bc64

    • SHA256

      53a8ce69fa26961c132151a90a3acf2681f4b7c9960813d9a8a41b6b83e4561e

    • SHA512

      beba08f2a0e4de82e74086266060a8bd731a250e5f4a123d923ce5a847ed9f26123acab7716ea049ae8b6b631beb52ac8f992da711f4ab195ae932272da7d514

    • SSDEEP

      3072:SFvdCkdoHFGFooobAqzNOEbOKZbtpGPsLxN:SFv0NPseNmKJtpLN

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks