Overview

overview

10

Static

static

3

8b4c0efd86...7b.exe

windows7-x64

10

8b4c0efd86...7b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b4c0efd868f312725b7e6f48177517b

  • Size

    96KB

  • Sample

    240203-d589msgbb3

  • MD5

    8b4c0efd868f312725b7e6f48177517b

  • SHA1

    c300b818e7a568d1b3652d081c3d6d75674d54c5

  • SHA256

    9e360c9739c4311e83721575be9bd4b37a5a786f137da98c6aeeb9a617c45228

  • SHA512

    25bea33c1170fd6e8d67470cd2b870ff333afcd16e6bbda62674d7ed6ed8e40ea2ed873611a11b00557bb245df3392447623b1e497155ba464f8378ed2319fe5

  • SSDEEP

    1536:ejEg52p9tyVQO8P8ychbEfwjj3RJNEo/knRzdnynE7RldNEP8lijOe00n+GNIjng:UE/pelychQSzR3Ek65Rldq00n+GCng

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8b4c0efd868f312725b7e6f48177517b

    • Size

      96KB

    • MD5

      8b4c0efd868f312725b7e6f48177517b

    • SHA1

      c300b818e7a568d1b3652d081c3d6d75674d54c5

    • SHA256

      9e360c9739c4311e83721575be9bd4b37a5a786f137da98c6aeeb9a617c45228

    • SHA512

      25bea33c1170fd6e8d67470cd2b870ff333afcd16e6bbda62674d7ed6ed8e40ea2ed873611a11b00557bb245df3392447623b1e497155ba464f8378ed2319fe5

    • SSDEEP

      1536:ejEg52p9tyVQO8P8ychbEfwjj3RJNEo/knRzdnynE7RldNEP8lijOe00n+GNIjng:UE/pelychQSzR3Ek65Rldq00n+GCng

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks