Overview

overview

10

Static

static

3

3f102e9c75...91.exe

windows7-x64

10

3f102e9c75...91.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f102e9c75d152bb9d0330b5266d0ca942fd127d9c99ca58d7277d4a3a46c191

  • Size

    132KB

  • Sample

    240319-x6zalsdh3z

  • MD5

    9afaa49f85f19fef31199dea988b748d

  • SHA1

    9ac57591b7ae7efd122ba76622f2258f339fa576

  • SHA256

    3f102e9c75d152bb9d0330b5266d0ca942fd127d9c99ca58d7277d4a3a46c191

  • SHA512

    3cae9cae32981e634b0ae61b83a191e680065271e72e680952a623340a3cb389d238936c8429ebbd2090406027375c0228d884c705ff5c853f8e2f8938164a35

  • SSDEEP

    3072:TYhdLUheXM0xuyf8C3SOONEluIrnMia06LERKzGXZ+E5j4oQZDm:TYhdASpuyf8C3SOONEluIrnYreKzGXZF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3f102e9c75d152bb9d0330b5266d0ca942fd127d9c99ca58d7277d4a3a46c191

    • Size

      132KB

    • MD5

      9afaa49f85f19fef31199dea988b748d

    • SHA1

      9ac57591b7ae7efd122ba76622f2258f339fa576

    • SHA256

      3f102e9c75d152bb9d0330b5266d0ca942fd127d9c99ca58d7277d4a3a46c191

    • SHA512

      3cae9cae32981e634b0ae61b83a191e680065271e72e680952a623340a3cb389d238936c8429ebbd2090406027375c0228d884c705ff5c853f8e2f8938164a35

    • SSDEEP

      3072:TYhdLUheXM0xuyf8C3SOONEluIrnMia06LERKzGXZ+E5j4oQZDm:TYhdASpuyf8C3SOONEluIrnYreKzGXZF

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks