Overview

overview

10

Static

static

3

dfaf8bf5dc...fb.exe

windows7-x64

10

dfaf8bf5dc...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfaf8bf5dca330440c38b6cce6f868fb

  • Size

    144KB

  • Sample

    240326-vsd2eaab8y

  • MD5

    dfaf8bf5dca330440c38b6cce6f868fb

  • SHA1

    49746b8453ecda71402b054f229d8453d488fcb3

  • SHA256

    089c70b37e17b83ab9a9e4fc37aa17679d6a7eb832595b4264ad54bed1581d89

  • SHA512

    b7839ef03befddcbf1ebe449677f180d94d055ae1eba29f6fa25a653a69c3d21090b07115bcf1397e8fcb4319193a5a19ddf86bde55793013d8757e970f371aa

  • SSDEEP

    1536:MtljAWunE0ggGDHjDTYpK3XZxkIh1mF+0da1f6ymqneF05bV4oQ/hKeXsjEFbZl:Mtgnhg/zLKM0AGMeF05p4oQZiE5Zl

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      dfaf8bf5dca330440c38b6cce6f868fb

    • Size

      144KB

    • MD5

      dfaf8bf5dca330440c38b6cce6f868fb

    • SHA1

      49746b8453ecda71402b054f229d8453d488fcb3

    • SHA256

      089c70b37e17b83ab9a9e4fc37aa17679d6a7eb832595b4264ad54bed1581d89

    • SHA512

      b7839ef03befddcbf1ebe449677f180d94d055ae1eba29f6fa25a653a69c3d21090b07115bcf1397e8fcb4319193a5a19ddf86bde55793013d8757e970f371aa

    • SSDEEP

      1536:MtljAWunE0ggGDHjDTYpK3XZxkIh1mF+0da1f6ymqneF05bV4oQ/hKeXsjEFbZl:Mtgnhg/zLKM0AGMeF05p4oQZiE5Zl

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks