Overview

overview

10

Static

static

3

b7ca9b2989...1f.exe

windows7-x64

10

b7ca9b2989...1f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7ca9b2989cf62862499a3f150b1971f

  • Size

    172KB

  • Sample

    240306-tcbqnscg4t

  • MD5

    b7ca9b2989cf62862499a3f150b1971f

  • SHA1

    00d7f74dd546afc1f9de33067f6d62154a9ab3a6

  • SHA256

    75f8f2ba30b736d4f971cca1d2f2efcd69489f8f31a786f2fba61781e49ae22b

  • SHA512

    914fb86bb41571108938ce2adb1ef428c4c59353bae48820cbdc1d0dc1747848bc03ae2127b971b7914fece7eff145f0d1081ffc08c27320327dd07aa4b3fd28

  • SSDEEP

    3072:tLBNUGAEbN01MiK/fObT/bGikHk6xI66XwiY+ZAcj5AHZdWUViBuAZdn:lUGAEbNsK/fObT/bGikE6xI1XwiY+ZA4

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b7ca9b2989cf62862499a3f150b1971f

    • Size

      172KB

    • MD5

      b7ca9b2989cf62862499a3f150b1971f

    • SHA1

      00d7f74dd546afc1f9de33067f6d62154a9ab3a6

    • SHA256

      75f8f2ba30b736d4f971cca1d2f2efcd69489f8f31a786f2fba61781e49ae22b

    • SHA512

      914fb86bb41571108938ce2adb1ef428c4c59353bae48820cbdc1d0dc1747848bc03ae2127b971b7914fece7eff145f0d1081ffc08c27320327dd07aa4b3fd28

    • SSDEEP

      3072:tLBNUGAEbN01MiK/fObT/bGikHk6xI66XwiY+ZAcj5AHZdWUViBuAZdn:lUGAEbNsK/fObT/bGikE6xI1XwiY+ZA4

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks