Overview

overview

10

Static

static

3

8671b038ea...c3.exe

windows7-x64

10

8671b038ea...c3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8671b038ea4c525382f4518d6b57c7c3

  • Size

    164KB

  • Sample

    240201-kn3tvsaaak

  • MD5

    8671b038ea4c525382f4518d6b57c7c3

  • SHA1

    6dda926f938f3fc8e44468c05469547b9a5e5588

  • SHA256

    34de36da87a46160cfcdddf07817cfb02bb63578ac78b1b7f2b3987aafff5ef3

  • SHA512

    04ebe0053c5886a2d13f6d2a4f01fd09f38c8e74149b15db38e46be8e579dac8c526fd085abed37f7a8ae9c2f30caff09eef94857a3cd3649832193be9e18466

  • SSDEEP

    1536:qMSwdqgJ7zGYLwKABCIvhZ9C9eO4F+NPouHj6Koa6Epm0SS+F8OJ6t+:hSwdqmGYL/t6jaUS+

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8671b038ea4c525382f4518d6b57c7c3

    • Size

      164KB

    • MD5

      8671b038ea4c525382f4518d6b57c7c3

    • SHA1

      6dda926f938f3fc8e44468c05469547b9a5e5588

    • SHA256

      34de36da87a46160cfcdddf07817cfb02bb63578ac78b1b7f2b3987aafff5ef3

    • SHA512

      04ebe0053c5886a2d13f6d2a4f01fd09f38c8e74149b15db38e46be8e579dac8c526fd085abed37f7a8ae9c2f30caff09eef94857a3cd3649832193be9e18466

    • SSDEEP

      1536:qMSwdqgJ7zGYLwKABCIvhZ9C9eO4F+NPouHj6Koa6Epm0SS+F8OJ6t+:hSwdqmGYL/t6jaUS+

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks