Overview

overview

10

Static

static

3

cb014fe5c0...48.exe

windows7-x64

10

cb014fe5c0...48.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cb014fe5c07a2fe01ba099a73a188b6f5530dc354c2e3b84c2c13ec5f4424048

  • Size

    216KB

  • Sample

    240306-3q8f8scg3z

  • MD5

    000e3b49539c7a05bd04ce3626f8cd19

  • SHA1

    f2455b37eb2bc1dd2d89e8efd16874803cbf2903

  • SHA256

    cb014fe5c07a2fe01ba099a73a188b6f5530dc354c2e3b84c2c13ec5f4424048

  • SHA512

    b0693268653881b9bfe105445b40a9e2d1f7cb20b4b1e391d16a9c856101b4432c7064685cf75592d8678c3f9bb101a9624f6b802c3398b7e3faa2f3ee2374bc

  • SSDEEP

    6144:H2fIfrt3+TetonBi3QxRy4g09ICSnqf9uSUgkxtpsaPjK/bEoK828fwAoEn+MM:H2Irt3+TetonBi3QxRwfnqf9uSUgkxtZ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      cb014fe5c07a2fe01ba099a73a188b6f5530dc354c2e3b84c2c13ec5f4424048

    • Size

      216KB

    • MD5

      000e3b49539c7a05bd04ce3626f8cd19

    • SHA1

      f2455b37eb2bc1dd2d89e8efd16874803cbf2903

    • SHA256

      cb014fe5c07a2fe01ba099a73a188b6f5530dc354c2e3b84c2c13ec5f4424048

    • SHA512

      b0693268653881b9bfe105445b40a9e2d1f7cb20b4b1e391d16a9c856101b4432c7064685cf75592d8678c3f9bb101a9624f6b802c3398b7e3faa2f3ee2374bc

    • SSDEEP

      6144:H2fIfrt3+TetonBi3QxRy4g09ICSnqf9uSUgkxtpsaPjK/bEoK828fwAoEn+MM:H2Irt3+TetonBi3QxRwfnqf9uSUgkxtZ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks