Overview

overview

10

Static

static

3

b781086793...22.exe

windows7-x64

10

b781086793...22.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b781086793945cda72dd8840a67ee6bcc1d1cd2a90ac1b7bd489157165e77422

  • Size

    88KB

  • Sample

    240312-bsyahabh5y

  • MD5

    e3ce497d459182b2fb3d538e9375dcd2

  • SHA1

    1a9191d696607bc56091b65c92b281e036ff8ef3

  • SHA256

    b781086793945cda72dd8840a67ee6bcc1d1cd2a90ac1b7bd489157165e77422

  • SHA512

    349ed90b0494c134ecf191c4debc175baa2bca17a12c3c493f99acd2e4c53fabecba2f535240eab9054d238efc0b6c8c6d4f7488e9656c682f59a8003b74178a

  • SSDEEP

    768:vAP68qOJ+TtIjwHpFeh6gM1rA8dOsc7jUq4RkA5o3K1DfsvtzsXjLft+9o1mm:vAPHqlZI0LFjnAzA5o6BfItoXjLl0hm

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b781086793945cda72dd8840a67ee6bcc1d1cd2a90ac1b7bd489157165e77422

    • Size

      88KB

    • MD5

      e3ce497d459182b2fb3d538e9375dcd2

    • SHA1

      1a9191d696607bc56091b65c92b281e036ff8ef3

    • SHA256

      b781086793945cda72dd8840a67ee6bcc1d1cd2a90ac1b7bd489157165e77422

    • SHA512

      349ed90b0494c134ecf191c4debc175baa2bca17a12c3c493f99acd2e4c53fabecba2f535240eab9054d238efc0b6c8c6d4f7488e9656c682f59a8003b74178a

    • SSDEEP

      768:vAP68qOJ+TtIjwHpFeh6gM1rA8dOsc7jUq4RkA5o3K1DfsvtzsXjLft+9o1mm:vAPHqlZI0LFjnAzA5o6BfItoXjLl0hm

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks