Overview

overview

10

Static

static

3

9b778d8519...d4.exe

windows7-x64

10

9b778d8519...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9b778d8519139ce7f2d58bd6eb73ced4

  • Size

    292KB

  • Sample

    240214-msbx2sgb7y

  • MD5

    9b778d8519139ce7f2d58bd6eb73ced4

  • SHA1

    916d9b985dd2406d4a12cb41e95bfa8dd371d851

  • SHA256

    d4c5edf8dddcc40aa71cc1a0cb6617c4cebc08efc07dfeee44abd910d59e9c33

  • SHA512

    55694a8011d9c0c2c6edcf1a479a50a5e4eb3996055cc4b4a4992682bd2f145d4252d243f6837b942f581fb0c8bab9812027eb31631eafa4c66671f900b8e69d

  • SSDEEP

    3072:Cn4Od4Y9diY/OBq7CFLuupaFBzxk7c7awSZohDnjV2S8NmMx3WarRDSJOtpTxzsd:CRiYILuupszxk7USZoDnp23xmg9HtEU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9b778d8519139ce7f2d58bd6eb73ced4

    • Size

      292KB

    • MD5

      9b778d8519139ce7f2d58bd6eb73ced4

    • SHA1

      916d9b985dd2406d4a12cb41e95bfa8dd371d851

    • SHA256

      d4c5edf8dddcc40aa71cc1a0cb6617c4cebc08efc07dfeee44abd910d59e9c33

    • SHA512

      55694a8011d9c0c2c6edcf1a479a50a5e4eb3996055cc4b4a4992682bd2f145d4252d243f6837b942f581fb0c8bab9812027eb31631eafa4c66671f900b8e69d

    • SSDEEP

      3072:Cn4Od4Y9diY/OBq7CFLuupaFBzxk7c7awSZohDnjV2S8NmMx3WarRDSJOtpTxzsd:CRiYILuupszxk7USZoDnp23xmg9HtEU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks