Overview

overview

8

Static

static

3

a45eff5dd3...c4.exe

windows7-x64

8

a45eff5dd3...c4.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a45eff5dd39039884fc23f091556cdc4

  • Size

    17KB

  • Sample

    240225-v3rp9ahh8t

  • MD5

    a45eff5dd39039884fc23f091556cdc4

  • SHA1

    eb0e5535895dd74e3a6f8c75042e1aa3adf69445

  • SHA256

    977298380a5e07130797e8e0e343065249819ebcd680480afeeb5b6c1bd16f51

  • SHA512

    5f22f14a26be050ab01c43c2674f62cfe846432ee2443b674bc5b7cb3ec9826a4ce78c2a1b2bfcf61a7c675e525e221afdd24ed7fe88076fc8619ccb8853ac78

  • SSDEEP

    384:cFrMLxD2cmZO2Zp+Nye8pqrmub8TyztsDN:c1yD2oKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      a45eff5dd39039884fc23f091556cdc4

    • Size

      17KB

    • MD5

      a45eff5dd39039884fc23f091556cdc4

    • SHA1

      eb0e5535895dd74e3a6f8c75042e1aa3adf69445

    • SHA256

      977298380a5e07130797e8e0e343065249819ebcd680480afeeb5b6c1bd16f51

    • SHA512

      5f22f14a26be050ab01c43c2674f62cfe846432ee2443b674bc5b7cb3ec9826a4ce78c2a1b2bfcf61a7c675e525e221afdd24ed7fe88076fc8619ccb8853ac78

    • SSDEEP

      384:cFrMLxD2cmZO2Zp+Nye8pqrmub8TyztsDN:c1yD2oKK8o8TyJc

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks