Overview

overview

10

Static

static

3

c156486385...fb.exe

windows7-x64

10

c156486385...fb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c15648638561aa1b2a033c847b93e4fb

  • Size

    168KB

  • Sample

    240311-xehtjsda47

  • MD5

    c15648638561aa1b2a033c847b93e4fb

  • SHA1

    03c23aaaa26924a5d233628fdd9f38f530a8335c

  • SHA256

    df89600cc667afcac3f62a5b74a136490e5f073a0b1807231a7dbcab12d6700e

  • SHA512

    53171733c00cc3ae69bed738c4c50a243cd5961404fd9151e18b45652f18fb265568b5c8c111bc7296b15d4ae2f24dd431c233536c47dc5e1e01448d69bf6c35

  • SSDEEP

    768:Jt3k5SAvzwU2xegyvWvg0hv4ZZs9y01+OkEHS8+nUnmfFB5R11dXcSzKU:JwbwU2Igk0hvp9bwfFB5R1bciKU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c15648638561aa1b2a033c847b93e4fb

    • Size

      168KB

    • MD5

      c15648638561aa1b2a033c847b93e4fb

    • SHA1

      03c23aaaa26924a5d233628fdd9f38f530a8335c

    • SHA256

      df89600cc667afcac3f62a5b74a136490e5f073a0b1807231a7dbcab12d6700e

    • SHA512

      53171733c00cc3ae69bed738c4c50a243cd5961404fd9151e18b45652f18fb265568b5c8c111bc7296b15d4ae2f24dd431c233536c47dc5e1e01448d69bf6c35

    • SSDEEP

      768:Jt3k5SAvzwU2xegyvWvg0hv4ZZs9y01+OkEHS8+nUnmfFB5R11dXcSzKU:JwbwU2Igk0hvp9bwfFB5R1bciKU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks