Overview

overview

10

Static

static

3

d640c7237a...fc.exe

windows7-x64

10

d640c7237a...fc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d640c7237a022bc33923c754d382c8da3a06c7047288568fef07b842737e74fc

  • Size

    216KB

  • Sample

    240319-l1zhmsha58

  • MD5

    e352580dd5eb7c91f44e830a50ac309c

  • SHA1

    560d92c7335f43549b103b9cde95d9cac374623d

  • SHA256

    d640c7237a022bc33923c754d382c8da3a06c7047288568fef07b842737e74fc

  • SHA512

    8470ab6b9bbd7719a7ca7d0f04ff5e2bb1b255031053bc729361d386f33ad76c18bacaf4c5ff3b6bee3993876312849878a22b02b5d901cea232d25246d8c433

  • SSDEEP

    3072:R4Ozq5gnCOdmLGeCfcpwA5f3CEoEtUMbfG:KOzgOK7cKiED5

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d640c7237a022bc33923c754d382c8da3a06c7047288568fef07b842737e74fc

    • Size

      216KB

    • MD5

      e352580dd5eb7c91f44e830a50ac309c

    • SHA1

      560d92c7335f43549b103b9cde95d9cac374623d

    • SHA256

      d640c7237a022bc33923c754d382c8da3a06c7047288568fef07b842737e74fc

    • SHA512

      8470ab6b9bbd7719a7ca7d0f04ff5e2bb1b255031053bc729361d386f33ad76c18bacaf4c5ff3b6bee3993876312849878a22b02b5d901cea232d25246d8c433

    • SSDEEP

      3072:R4Ozq5gnCOdmLGeCfcpwA5f3CEoEtUMbfG:KOzgOK7cKiED5

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks