Overview

overview

10

Static

static

3

ab963de9a3...cf.exe

windows7-x64

10

ab963de9a3...cf.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab963de9a3c0910c956f143a25c852cf

  • Size

    200KB

  • Sample

    240228-lpc59sge76

  • MD5

    ab963de9a3c0910c956f143a25c852cf

  • SHA1

    f44d8221f5025f5cab02014f2eab30e8025ee678

  • SHA256

    194f6c208e07e47126954b669ac23e5d4a3887446a11ba6413f833fc04559fa0

  • SHA512

    660533d8bbf50c16a4f908de69784c96cf6dd81ff2363550fbb32c50360a229757000dba2bcbebdc54abb6ad75257f8c4baa54aae471dfb64a61cc3f241c76e3

  • SSDEEP

    3072:qULVk0tQ9nLHbB9WHCS0AgTlhsp3mWK8:G4QxL7B9WHK9Jhsp3t

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ab963de9a3c0910c956f143a25c852cf

    • Size

      200KB

    • MD5

      ab963de9a3c0910c956f143a25c852cf

    • SHA1

      f44d8221f5025f5cab02014f2eab30e8025ee678

    • SHA256

      194f6c208e07e47126954b669ac23e5d4a3887446a11ba6413f833fc04559fa0

    • SHA512

      660533d8bbf50c16a4f908de69784c96cf6dd81ff2363550fbb32c50360a229757000dba2bcbebdc54abb6ad75257f8c4baa54aae471dfb64a61cc3f241c76e3

    • SSDEEP

      3072:qULVk0tQ9nLHbB9WHCS0AgTlhsp3mWK8:G4QxL7B9WHK9Jhsp3t

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks