Overview

overview

10

Static

static

3

a243ca11b6...9f.exe

windows7-x64

10

a243ca11b6...9f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a243ca11b61f0641b49271fdf67a189f

  • Size

    176KB

  • Sample

    240224-t7ee2sgf73

  • MD5

    a243ca11b61f0641b49271fdf67a189f

  • SHA1

    17048b3ea46fb9ad951749256c24c57af335406f

  • SHA256

    32a0b9fc31fd380c3724c25ae0ad16413764576eb5dd45b125a19544f1d154af

  • SHA512

    8031ea6c6f5b38c08e8eb394b16cee2615ab66f03a5a2c7830801829d5100d63f4a37c58da5763e491c0efb423acb3f73acad7b393fbf56fdc0700631280b7d6

  • SSDEEP

    3072:yfRo/jynvgWK/fObT/bGiSEIGsbv0OpxYTNPybtDKk6SS3X:1G3K/fObT/bGiSE5sj3xYTNPybtDKk6H

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a243ca11b61f0641b49271fdf67a189f

    • Size

      176KB

    • MD5

      a243ca11b61f0641b49271fdf67a189f

    • SHA1

      17048b3ea46fb9ad951749256c24c57af335406f

    • SHA256

      32a0b9fc31fd380c3724c25ae0ad16413764576eb5dd45b125a19544f1d154af

    • SHA512

      8031ea6c6f5b38c08e8eb394b16cee2615ab66f03a5a2c7830801829d5100d63f4a37c58da5763e491c0efb423acb3f73acad7b393fbf56fdc0700631280b7d6

    • SSDEEP

      3072:yfRo/jynvgWK/fObT/bGiSEIGsbv0OpxYTNPybtDKk6SS3X:1G3K/fObT/bGiSE5sj3xYTNPybtDKk6H

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks