Overview

overview

7

Static

static

3

Evon.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Evon.exe

  • Size

    87.5MB

  • Sample

    240228-wjv41aac72

  • MD5

    cf530e69eb06c57a3dfa3ffdc5771a1f

  • SHA1

    95b7e51b37ec4ddae8a970ed5157ac346e2943e7

  • SHA256

    b1a64eda349bfba9e70a26f070c66f98426f8666502167732b573d8afc7b1f40

  • SHA512

    0bf1793278515c185edb76f1e8f22843dfdcb9c976f05c30196646a6c47be5b08a8b619fb97e94bd1224d71200cc9c4df21bfef02af39b8df46492bbd84704c4

  • SSDEEP

    1572864:BGp6fhqX1WAhhwFiAOPyWodm05LXfFFJAGJz0L7eNfvkIbPY7tbIqQP:5ZMHhkc4dm05LXRz0Cf8kutbdQP

Score
7/10
persistence

Malware Config

Targets

    • Target

      Evon.exe

    • Size

      87.5MB

    • MD5

      cf530e69eb06c57a3dfa3ffdc5771a1f

    • SHA1

      95b7e51b37ec4ddae8a970ed5157ac346e2943e7

    • SHA256

      b1a64eda349bfba9e70a26f070c66f98426f8666502167732b573d8afc7b1f40

    • SHA512

      0bf1793278515c185edb76f1e8f22843dfdcb9c976f05c30196646a6c47be5b08a8b619fb97e94bd1224d71200cc9c4df21bfef02af39b8df46492bbd84704c4

    • SSDEEP

      1572864:BGp6fhqX1WAhhwFiAOPyWodm05LXfFFJAGJz0L7eNfvkIbPY7tbIqQP:5ZMHhkc4dm05LXRz0Cf8kutbdQP

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks