Overview

overview

8

Static

static

3

c265062f90...2c.exe

windows7-x64

3

c265062f90...2c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c265062f9012942efb4cc71431c3252c

  • Size

    54KB

  • Sample

    240312-eh7yqsfh6w

  • MD5

    c265062f9012942efb4cc71431c3252c

  • SHA1

    63b73f6c6648fb5aa3b331580b9d7bd9bfadcda8

  • SHA256

    425f5c826645a86557fabfebd932f9baf59f6bfcd65fed2110eb5311e6f9c7e7

  • SHA512

    692d137740520d3354ddd81f3019b5716ba345d091f3be34464ebd1c9da458244a4ece326ca363823dcaa2a305ad10b1ccb8d0fb60e9858bda0fed88c855d742

  • SSDEEP

    768:yeJV08uVsgHgUDpiCqFYVO+1WlC1uxEtYk9cPWfuQdiHIWrwnvXv0wWE:LaCQDDpiC4uO+1lcytyPWfutwnEwWE

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      c265062f9012942efb4cc71431c3252c

    • Size

      54KB

    • MD5

      c265062f9012942efb4cc71431c3252c

    • SHA1

      63b73f6c6648fb5aa3b331580b9d7bd9bfadcda8

    • SHA256

      425f5c826645a86557fabfebd932f9baf59f6bfcd65fed2110eb5311e6f9c7e7

    • SHA512

      692d137740520d3354ddd81f3019b5716ba345d091f3be34464ebd1c9da458244a4ece326ca363823dcaa2a305ad10b1ccb8d0fb60e9858bda0fed88c855d742

    • SSDEEP

      768:yeJV08uVsgHgUDpiCqFYVO+1WlC1uxEtYk9cPWfuQdiHIWrwnvXv0wWE:LaCQDDpiC4uO+1lcytyPWfutwnEwWE

    Score
    8/10
    evasionpersistence

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks