Overview

overview

10

Static

static

3

c12576e982...74.exe

windows7-x64

10

c12576e982...74.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c12576e982a57d58f9f818e04e3f3074

  • Size

    140KB

  • Sample

    240311-vqqbnaha6x

  • MD5

    c12576e982a57d58f9f818e04e3f3074

  • SHA1

    a78e387cba08b4f64d825693c7b4f422a3d7730c

  • SHA256

    0223f0fe39443d4b57bfa079979bf39080351338f122fb0e864d0776fabae9a8

  • SHA512

    517b156d0bac1de7f6c3b80548382f9c21fe8587790ff6079a28519151dc2ac2ba898157ad0197cb194e5a4c5cfb55ca08efdabb214adf483624cbce8a006c8e

  • SSDEEP

    1536:axgnlf4Y2YenLF+fG4OEQhni+SJQ0juk4vcUez2WQp1AdG0fAUMi0OdxZXEJ0Mqf:vlflfGL02W2N0fAU9x5Ea3hGcE5j4oQ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c12576e982a57d58f9f818e04e3f3074

    • Size

      140KB

    • MD5

      c12576e982a57d58f9f818e04e3f3074

    • SHA1

      a78e387cba08b4f64d825693c7b4f422a3d7730c

    • SHA256

      0223f0fe39443d4b57bfa079979bf39080351338f122fb0e864d0776fabae9a8

    • SHA512

      517b156d0bac1de7f6c3b80548382f9c21fe8587790ff6079a28519151dc2ac2ba898157ad0197cb194e5a4c5cfb55ca08efdabb214adf483624cbce8a006c8e

    • SSDEEP

      1536:axgnlf4Y2YenLF+fG4OEQhni+SJQ0juk4vcUez2WQp1AdG0fAUMi0OdxZXEJ0Mqf:vlflfGL02W2N0fAU9x5Ea3hGcE5j4oQ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks