Overview

overview

10

Static

static

3

987bcb1801...6b.exe

windows7-x64

10

987bcb1801...6b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    987bcb1801004242f76a5af9149ba66b

  • Size

    96KB

  • Sample

    240213-e5ewgabf45

  • MD5

    987bcb1801004242f76a5af9149ba66b

  • SHA1

    b73cbb5c1c4745ce472970cda11168e97a270e94

  • SHA256

    6bb10d1ed15083b9a18c0f2dfb7f1c1ae0ae8e880725d292011abf6d52be4e83

  • SHA512

    d07f715042b4b0916f02563d640dbfb54ae414755df8d72e31346704bccd083efd81d29bf6dc5c820a032571137f57637571aa8a53db2dd7c4f380fc5231cb1b

  • SSDEEP

    1536:9zhBH/f6cOah9igkGulSc16l6u+NMMl/KlYv1T4hThFfNIjnZv2:plh98lu88FFfCnN2

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      987bcb1801004242f76a5af9149ba66b

    • Size

      96KB

    • MD5

      987bcb1801004242f76a5af9149ba66b

    • SHA1

      b73cbb5c1c4745ce472970cda11168e97a270e94

    • SHA256

      6bb10d1ed15083b9a18c0f2dfb7f1c1ae0ae8e880725d292011abf6d52be4e83

    • SHA512

      d07f715042b4b0916f02563d640dbfb54ae414755df8d72e31346704bccd083efd81d29bf6dc5c820a032571137f57637571aa8a53db2dd7c4f380fc5231cb1b

    • SSDEEP

      1536:9zhBH/f6cOah9igkGulSc16l6u+NMMl/KlYv1T4hThFfNIjnZv2:plh98lu88FFfCnN2

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks