Overview

overview

10

Static

static

3

9c492fba28...0b.exe

windows7-x64

10

9c492fba28...0b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9c492fba28581421baa4ce4bcc0c900b

  • Size

    136KB

  • Sample

    240214-wff6nsab63

  • MD5

    9c492fba28581421baa4ce4bcc0c900b

  • SHA1

    485a60339d595673593d4a82b394f289421992f3

  • SHA256

    d18024ab5c4e11ac141543029d03e8f5e4a49d6462edc538b5aca5120ab810ea

  • SHA512

    66367dba096b594d5bed85e74b1361b792f8e6ef9dc372a63f189d568f05186d1f70cd7e0ce29d268f87b2c64cee94a692d07bd15ba06fc0135f384df793ea1a

  • SSDEEP

    3072:Bml43DwwjBfQn7WbIqH0ybZBiOllyEmcP82+aVdOt66VGegmuD:Bma3nQn7WbIqH0ybZBiOllyE5D+aVkja

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9c492fba28581421baa4ce4bcc0c900b

    • Size

      136KB

    • MD5

      9c492fba28581421baa4ce4bcc0c900b

    • SHA1

      485a60339d595673593d4a82b394f289421992f3

    • SHA256

      d18024ab5c4e11ac141543029d03e8f5e4a49d6462edc538b5aca5120ab810ea

    • SHA512

      66367dba096b594d5bed85e74b1361b792f8e6ef9dc372a63f189d568f05186d1f70cd7e0ce29d268f87b2c64cee94a692d07bd15ba06fc0135f384df793ea1a

    • SSDEEP

      3072:Bml43DwwjBfQn7WbIqH0ybZBiOllyEmcP82+aVdOt66VGegmuD:Bma3nQn7WbIqH0ybZBiOllyE5D+aVkja

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks