Overview

overview

10

Static

static

3

ec83e3eeca...18.exe

windows7-x64

10

ec83e3eeca...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ec83e3eecaf4499f826c23bf6db957c5eab48a4f4f2cc6a7c3919722e0514b18

  • Size

    256KB

  • Sample

    240309-ad8x1sbb3w

  • MD5

    afdd4138cb4467fe560df27e84191cd5

  • SHA1

    efe7fc89599c2194e8a38b36f939507ab9792848

  • SHA256

    ec83e3eecaf4499f826c23bf6db957c5eab48a4f4f2cc6a7c3919722e0514b18

  • SHA512

    bcbcab1c2646b7c64f54d5de747c32e314ff833219dd545f755184fca65cf27926a3214cfef5db4d5fe48d74ddf775daa3218ab564b09a4f01820c7a54de04fc

  • SSDEEP

    6144:pvg18eNTb/UoKHU8iN2iYty5Y+tG91K09YEuOFcU0b:pvg1JxVSU8iN2iYty6+tG91yEuOdq

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ec83e3eecaf4499f826c23bf6db957c5eab48a4f4f2cc6a7c3919722e0514b18

    • Size

      256KB

    • MD5

      afdd4138cb4467fe560df27e84191cd5

    • SHA1

      efe7fc89599c2194e8a38b36f939507ab9792848

    • SHA256

      ec83e3eecaf4499f826c23bf6db957c5eab48a4f4f2cc6a7c3919722e0514b18

    • SHA512

      bcbcab1c2646b7c64f54d5de747c32e314ff833219dd545f755184fca65cf27926a3214cfef5db4d5fe48d74ddf775daa3218ab564b09a4f01820c7a54de04fc

    • SSDEEP

      6144:pvg18eNTb/UoKHU8iN2iYty5Y+tG91K09YEuOFcU0b:pvg1JxVSU8iN2iYty6+tG91yEuOdq

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks