Overview

overview

10

Static

static

3

b4c0bd47c2...89.exe

windows7-x64

10

b4c0bd47c2...89.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4c0bd47c23303426269a418fcd5d489

  • Size

    88KB

  • Sample

    240305-p76gbagc49

  • MD5

    b4c0bd47c23303426269a418fcd5d489

  • SHA1

    6bf3eaed39ee05045d69f395be37afad32d3eed5

  • SHA256

    a24745bd454b6631682e068650a6ae2c23fc6f2e62439667e20baf8d4569f16b

  • SHA512

    0fc2cab64db0fef9b69268891a9aec65530589d548246cbcc2687dae42a6d86d356e33ae6bb3486eb1b7d3e96a38b04ca8d9b563ba276826e0319b0a233a93bb

  • SSDEEP

    1536:RLmnuYfySpy8tXG06YpqdXTsYJ/F+FBFIFGFYF7DUZxTZ0sa:zSs0G0mZZx

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b4c0bd47c23303426269a418fcd5d489

    • Size

      88KB

    • MD5

      b4c0bd47c23303426269a418fcd5d489

    • SHA1

      6bf3eaed39ee05045d69f395be37afad32d3eed5

    • SHA256

      a24745bd454b6631682e068650a6ae2c23fc6f2e62439667e20baf8d4569f16b

    • SHA512

      0fc2cab64db0fef9b69268891a9aec65530589d548246cbcc2687dae42a6d86d356e33ae6bb3486eb1b7d3e96a38b04ca8d9b563ba276826e0319b0a233a93bb

    • SSDEEP

      1536:RLmnuYfySpy8tXG06YpqdXTsYJ/F+FBFIFGFYF7DUZxTZ0sa:zSs0G0mZZx

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks