Overview

overview

10

Static

static

3

a0fc0c18ef...f0.exe

windows7-x64

10

a0fc0c18ef...f0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a0fc0c18ef49b8a63ab4cae3e8c3fcf0

  • Size

    224KB

  • Sample

    240224-fgp7zahg54

  • MD5

    a0fc0c18ef49b8a63ab4cae3e8c3fcf0

  • SHA1

    de753a8ab3ce041bb29349594f1ade319a096c51

  • SHA256

    30637edf1097fb08893342a76ee85c407551b3fe3774016baf6ec7dc280158e7

  • SHA512

    64fab40632f80801871df3d32eec9c360081dbb0fd3e3d642b0ea04e8e93c30f559ce893da9c45de762ecf1506a38a30fe4722a4522281aad5e54e70a6313328

  • SSDEEP

    3072:U5II974sIqrgl4iEzjKTF40qVA0KNBxplD:U5IsVIqrgCHpXA0KZp

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a0fc0c18ef49b8a63ab4cae3e8c3fcf0

    • Size

      224KB

    • MD5

      a0fc0c18ef49b8a63ab4cae3e8c3fcf0

    • SHA1

      de753a8ab3ce041bb29349594f1ade319a096c51

    • SHA256

      30637edf1097fb08893342a76ee85c407551b3fe3774016baf6ec7dc280158e7

    • SHA512

      64fab40632f80801871df3d32eec9c360081dbb0fd3e3d642b0ea04e8e93c30f559ce893da9c45de762ecf1506a38a30fe4722a4522281aad5e54e70a6313328

    • SSDEEP

      3072:U5II974sIqrgl4iEzjKTF40qVA0KNBxplD:U5IsVIqrgCHpXA0KZp

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks