Overview

overview

10

Static

static

3

23a4ca6483...4c.exe

windows7-x64

10

23a4ca6483...4c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23a4ca6483c7c65cba62088a9151495eba4bceca2e38b955f4bbe8c42cdb0d4c

  • Size

    88KB

  • Sample

    240408-x6g2bsch5t

  • MD5

    18e7a6281d1750008983a2493ba7db22

  • SHA1

    f57120d9b02446d02362f1cd9a8cc560ede11f26

  • SHA256

    23a4ca6483c7c65cba62088a9151495eba4bceca2e38b955f4bbe8c42cdb0d4c

  • SHA512

    5cf2f4dc68c73c9dd8db9bc736d1519ccef3934c5131f9907accbf8352bab5fd40004f8809b2217f33388919319ccb392812d033e1b41ee43ea014254dd55477

  • SSDEEP

    1536:s1mCSIQ/JDHKa5LJW6/Z2NZQKvdmNmS/:cNSI8DHKuFOJvdN

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      23a4ca6483c7c65cba62088a9151495eba4bceca2e38b955f4bbe8c42cdb0d4c

    • Size

      88KB

    • MD5

      18e7a6281d1750008983a2493ba7db22

    • SHA1

      f57120d9b02446d02362f1cd9a8cc560ede11f26

    • SHA256

      23a4ca6483c7c65cba62088a9151495eba4bceca2e38b955f4bbe8c42cdb0d4c

    • SHA512

      5cf2f4dc68c73c9dd8db9bc736d1519ccef3934c5131f9907accbf8352bab5fd40004f8809b2217f33388919319ccb392812d033e1b41ee43ea014254dd55477

    • SSDEEP

      1536:s1mCSIQ/JDHKa5LJW6/Z2NZQKvdmNmS/:cNSI8DHKuFOJvdN

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks