Overview

overview

10

Static

static

3

b4e9369735...f2.exe

windows7-x64

10

b4e9369735...f2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4e9369735637673b6a548f6a5b0c1f2

  • Size

    172KB

  • Sample

    240305-rmkp8ahf74

  • MD5

    b4e9369735637673b6a548f6a5b0c1f2

  • SHA1

    e9761483e55f57226287f17511a060d61606b69b

  • SHA256

    3a48fb6424d839e4c395283715ce7db43e76053f0fee4631677576bb628091ad

  • SHA512

    c30065131a491be91f778570de85d2958eed6fdb5f5d016a3b3a861fdece934ddc7b8a173d380b53ed8f891c101d71551c74c8f156a1e514c07a60a5e191d229

  • SSDEEP

    3072:ez7lB5QqiwcCA0laletdpVinzswyAQjh/gSF3Ef3ykQozoPC4:8Iqtc30l+2yzswyAQjh/gSF3Ef3ykQoe

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b4e9369735637673b6a548f6a5b0c1f2

    • Size

      172KB

    • MD5

      b4e9369735637673b6a548f6a5b0c1f2

    • SHA1

      e9761483e55f57226287f17511a060d61606b69b

    • SHA256

      3a48fb6424d839e4c395283715ce7db43e76053f0fee4631677576bb628091ad

    • SHA512

      c30065131a491be91f778570de85d2958eed6fdb5f5d016a3b3a861fdece934ddc7b8a173d380b53ed8f891c101d71551c74c8f156a1e514c07a60a5e191d229

    • SSDEEP

      3072:ez7lB5QqiwcCA0laletdpVinzswyAQjh/gSF3Ef3ykQozoPC4:8Iqtc30l+2yzswyAQjh/gSF3Ef3ykQoe

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks