Overview

overview

10

Static

static

3

d74144566b...24.exe

windows7-x64

10

d74144566b...24.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d74144566bbe02f34e257fbcf0983824

  • Size

    184KB

  • Sample

    240319-2cl6eaaa6x

  • MD5

    d74144566bbe02f34e257fbcf0983824

  • SHA1

    4c50bdba216033599e550f0a202918a354172abc

  • SHA256

    711d0747b56f44a7ea8dd3dce81120d334a918b95c342b543b6c12fb93c8f004

  • SHA512

    7f420f166d3c2aa5dd0560bbf985c5f0daf45218b4f2b78c12cb85c4457c27e6ab80d166fbc18c83e98c31b3a9f23fff1801560a9dc68a68b88b078a7245269a

  • SSDEEP

    3072:FI5EBw9YUdtG716ennADVeMfcRAGKB+uMTEd1CT:Fi5u1tnADVhERAGKB+uSEd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d74144566bbe02f34e257fbcf0983824

    • Size

      184KB

    • MD5

      d74144566bbe02f34e257fbcf0983824

    • SHA1

      4c50bdba216033599e550f0a202918a354172abc

    • SHA256

      711d0747b56f44a7ea8dd3dce81120d334a918b95c342b543b6c12fb93c8f004

    • SHA512

      7f420f166d3c2aa5dd0560bbf985c5f0daf45218b4f2b78c12cb85c4457c27e6ab80d166fbc18c83e98c31b3a9f23fff1801560a9dc68a68b88b078a7245269a

    • SSDEEP

      3072:FI5EBw9YUdtG716ennADVeMfcRAGKB+uMTEd1CT:Fi5u1tnADVhERAGKB+uSEd

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks