Overview

overview

10

Static

static

3

89671d1081...bb.exe

windows7-x64

10

89671d1081...bb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    89671d1081fdcafb8475534f52be67bb

  • Size

    212KB

  • Sample

    240202-npb93sfadp

  • MD5

    89671d1081fdcafb8475534f52be67bb

  • SHA1

    19aaee544c2e394921a57841a60977c1fd110ee9

  • SHA256

    21d079d75217db20b9ae36e6e334cc256e868f5c4ddc9ef0d2a8885cacd992ea

  • SHA512

    5fd35a5ed4d434e048d4f16e4aabbd4037da71752b2e2ec0edc708ddc62071aaaf6a1a6aab35dcfc12182563f6d75f04a1b81a129bf91f2822db8014df46df3a

  • SSDEEP

    3072:h9UB99PLzCCasJhGYiNAcXOqQnys80/p5GomjRMEQYbLlmuPD+BfPc1rPU35pJuP:hqBj6OqQn580/JXEJYc1rPfJF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      89671d1081fdcafb8475534f52be67bb

    • Size

      212KB

    • MD5

      89671d1081fdcafb8475534f52be67bb

    • SHA1

      19aaee544c2e394921a57841a60977c1fd110ee9

    • SHA256

      21d079d75217db20b9ae36e6e334cc256e868f5c4ddc9ef0d2a8885cacd992ea

    • SHA512

      5fd35a5ed4d434e048d4f16e4aabbd4037da71752b2e2ec0edc708ddc62071aaaf6a1a6aab35dcfc12182563f6d75f04a1b81a129bf91f2822db8014df46df3a

    • SSDEEP

      3072:h9UB99PLzCCasJhGYiNAcXOqQnys80/p5GomjRMEQYbLlmuPD+BfPc1rPU35pJuP:hqBj6OqQn580/JXEJYc1rPfJF

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks