Overview

overview

10

Static

static

3

a40daeb3dd...d8.exe

windows7-x64

10

a40daeb3dd...d8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a40daeb3dd6687dae9b31900277a83d8

  • Size

    132KB

  • Sample

    240225-r45fyseh3z

  • MD5

    a40daeb3dd6687dae9b31900277a83d8

  • SHA1

    7a821d797311f61b9f0ee9c50dd825f66d94d482

  • SHA256

    c3c0bd7d23956c37c1251bc2304528c53ae0a147aa2112c3955590b959d3bf86

  • SHA512

    472c62a065fb8f32e3eed066471b4346f24cb0c45f3e51bc4c2296db540b5080761f746f3fd55e3c54885ea7329d392d79fefebcbb6bb37d8cfc20c2a5787f84

  • SSDEEP

    3072:qApHG6d+xspX7//GSeIlLXkskMvB00bsMyXeWLkf:qApHGaI+7//leIBXTkMZ00bsMyXeAk

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a40daeb3dd6687dae9b31900277a83d8

    • Size

      132KB

    • MD5

      a40daeb3dd6687dae9b31900277a83d8

    • SHA1

      7a821d797311f61b9f0ee9c50dd825f66d94d482

    • SHA256

      c3c0bd7d23956c37c1251bc2304528c53ae0a147aa2112c3955590b959d3bf86

    • SHA512

      472c62a065fb8f32e3eed066471b4346f24cb0c45f3e51bc4c2296db540b5080761f746f3fd55e3c54885ea7329d392d79fefebcbb6bb37d8cfc20c2a5787f84

    • SSDEEP

      3072:qApHG6d+xspX7//GSeIlLXkskMvB00bsMyXeWLkf:qApHGaI+7//leIBXTkMZ00bsMyXeAk

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks