Overview

overview

10

Static

static

7

c57db3e6ed...2a.exe

windows7-x64

10

c57db3e6ed...2a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c57db3e6ed11dc0bd0f113ea9668602a

  • Size

    55KB

  • Sample

    240313-k2v16shd8w

  • MD5

    c57db3e6ed11dc0bd0f113ea9668602a

  • SHA1

    61d2406fad26bc7b4b1bda77f0006d1c80e6fd6a

  • SHA256

    c4c9ad0b79223f5e5539955e0ff239d71c5a87c1bbacc6f229717eb46a2fee98

  • SHA512

    f04c5feed0425ad5bf98816a52e7e07f8e8c384c40d36edf0b52f9d07e9093c2977e98d404650344d120dbbbf3dfc68bb553b19772c4d2b9c8ed09da5777c6cd

  • SSDEEP

    768:xkeYCYJQYLkmv2hVpeMOvkU+Va7jn19Di/ITzNh5FOdn+BRhgXcSP:bdYJQ9vTeMXq7igXNh5Q9+xgs

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      c57db3e6ed11dc0bd0f113ea9668602a

    • Size

      55KB

    • MD5

      c57db3e6ed11dc0bd0f113ea9668602a

    • SHA1

      61d2406fad26bc7b4b1bda77f0006d1c80e6fd6a

    • SHA256

      c4c9ad0b79223f5e5539955e0ff239d71c5a87c1bbacc6f229717eb46a2fee98

    • SHA512

      f04c5feed0425ad5bf98816a52e7e07f8e8c384c40d36edf0b52f9d07e9093c2977e98d404650344d120dbbbf3dfc68bb553b19772c4d2b9c8ed09da5777c6cd

    • SSDEEP

      768:xkeYCYJQYLkmv2hVpeMOvkU+Va7jn19Di/ITzNh5FOdn+BRhgXcSP:bdYJQ9vTeMXq7igXNh5Q9+xgs

    Score
    10/10
    evasionpersistenceupx

    • Modifies firewall policy service

      evasion

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks