Overview

overview

10

Static

static

3

fb2158b618...f3.exe

windows7-x64

10

fb2158b618...f3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb2158b6181d7ff6f7857d369118d5e28a79ece69f6fc35cf8b6510217f734f3

  • Size

    208KB

  • Sample

    240405-c64j4sah22

  • MD5

    0a830b8c7c2dd711037c3e46cdc32446

  • SHA1

    ea404a0d31c489291387ed982911a94a47523134

  • SHA256

    fb2158b6181d7ff6f7857d369118d5e28a79ece69f6fc35cf8b6510217f734f3

  • SHA512

    5f5a44078c85207075f874c590525c977525720795d5375d589ca6fad11b8c424b499e49379c26832faa8bfd3705d4f09886f2ce2882500078259e50557f9c93

  • SSDEEP

    6144:tRGynenu5W98TFK/fObT/bGiA14DFsqmVrWpMY9FAN:t8iB5W98TFK/fObT/bGidIrW39FAN

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fb2158b6181d7ff6f7857d369118d5e28a79ece69f6fc35cf8b6510217f734f3

    • Size

      208KB

    • MD5

      0a830b8c7c2dd711037c3e46cdc32446

    • SHA1

      ea404a0d31c489291387ed982911a94a47523134

    • SHA256

      fb2158b6181d7ff6f7857d369118d5e28a79ece69f6fc35cf8b6510217f734f3

    • SHA512

      5f5a44078c85207075f874c590525c977525720795d5375d589ca6fad11b8c424b499e49379c26832faa8bfd3705d4f09886f2ce2882500078259e50557f9c93

    • SSDEEP

      6144:tRGynenu5W98TFK/fObT/bGiA14DFsqmVrWpMY9FAN:t8iB5W98TFK/fObT/bGidIrW39FAN

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks