Overview

overview

10

Static

static

3

03a2d5a6ab...e3.exe

windows7-x64

10

03a2d5a6ab...e3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03a2d5a6abe16fe7b871ee829256ef373a31f90d413abe66ea739074bc2837e3

  • Size

    96KB

  • Sample

    240309-x88xtsgh2y

  • MD5

    3cf5e13645e42ed2757e3cd1bf6b357f

  • SHA1

    1e172f5f4624f04f263459cdce587ead19290e9f

  • SHA256

    03a2d5a6abe16fe7b871ee829256ef373a31f90d413abe66ea739074bc2837e3

  • SHA512

    bdfb6d569dd65ff6335a5c9ee8d6fc9750aefd4ecd23d1a552024e7cdf041d577d7a6cdbf0fcccb60491301cac9796b57d47ec905464c7707d2e3c46334300b0

  • SSDEEP

    1536:WlBNogzWwmhLmncdkadGVScGYJXeiyCnO+TI4K4I4i404R4Z1VcvsJOpPpMm4/Nn:mN9W6cOadGRJuH7ut/Tdvd+hXV/vU3vk

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      03a2d5a6abe16fe7b871ee829256ef373a31f90d413abe66ea739074bc2837e3

    • Size

      96KB

    • MD5

      3cf5e13645e42ed2757e3cd1bf6b357f

    • SHA1

      1e172f5f4624f04f263459cdce587ead19290e9f

    • SHA256

      03a2d5a6abe16fe7b871ee829256ef373a31f90d413abe66ea739074bc2837e3

    • SHA512

      bdfb6d569dd65ff6335a5c9ee8d6fc9750aefd4ecd23d1a552024e7cdf041d577d7a6cdbf0fcccb60491301cac9796b57d47ec905464c7707d2e3c46334300b0

    • SSDEEP

      1536:WlBNogzWwmhLmncdkadGVScGYJXeiyCnO+TI4K4I4i404R4Z1VcvsJOpPpMm4/Nn:mN9W6cOadGRJuH7ut/Tdvd+hXV/vU3vk

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks