Overview

overview

10

Static

static

3

1e02516503...fc.exe

windows7-x64

10

1e02516503...fc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1e02516503cf48a9754989b76eb4efbc8acea74fbe284e83477509651a8b6efc

  • Size

    384KB

  • Sample

    240314-wjsnwaag6z

  • MD5

    fd63ba02d77f3d09697a45fa6849fae2

  • SHA1

    f62a0be0aa9978a15dcc4b054e9eb546286ba359

  • SHA256

    1e02516503cf48a9754989b76eb4efbc8acea74fbe284e83477509651a8b6efc

  • SHA512

    6baf5cf4f5dfcf3e02246e1270fd3a50dab54cf33836a69f1bd2b7a071f098f39f0c5c7f9b49860906b36b3e404f57f6d0bfd1d7ef9b1f50b16bb6c427831713

  • SSDEEP

    6144:0stj9I4rG6ua4a2TURdKDZ23w8QEoKHjWZLKBPvHIWM5i:inaUZ2A81vWpaPvsi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1e02516503cf48a9754989b76eb4efbc8acea74fbe284e83477509651a8b6efc

    • Size

      384KB

    • MD5

      fd63ba02d77f3d09697a45fa6849fae2

    • SHA1

      f62a0be0aa9978a15dcc4b054e9eb546286ba359

    • SHA256

      1e02516503cf48a9754989b76eb4efbc8acea74fbe284e83477509651a8b6efc

    • SHA512

      6baf5cf4f5dfcf3e02246e1270fd3a50dab54cf33836a69f1bd2b7a071f098f39f0c5c7f9b49860906b36b3e404f57f6d0bfd1d7ef9b1f50b16bb6c427831713

    • SSDEEP

      6144:0stj9I4rG6ua4a2TURdKDZ23w8QEoKHjWZLKBPvHIWM5i:inaUZ2A81vWpaPvsi

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks