Overview

overview

10

Static

static

3

c97ad36257...8f.exe

windows7-x64

10

c97ad36257...8f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c97ad3625745496b6465cb5a1d3e838f

  • Size

    204KB

  • Sample

    240409-3ez1qadc2y

  • MD5

    c97ad3625745496b6465cb5a1d3e838f

  • SHA1

    654b0644c750c8d3de5f401977a9dae9438ee9fc

  • SHA256

    4d51115033d61a76d782ba377ef23b73512e5de4a0e25fe0c9392ac3ad7b2a13

  • SHA512

    83d5bdd6a4bcd2debc1066ad755e23629b490d9e49640385382f1f5b4706e3d17e5d54e226b4eb33e9319d76f2cfb8cf575e6520d7f14eb7a64f8b34a9a4bd0a

  • SSDEEP

    3072:ymRW8/0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWyF:dAc4QxL7B9W0c1RCzR/fSmlR

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c97ad3625745496b6465cb5a1d3e838f

    • Size

      204KB

    • MD5

      c97ad3625745496b6465cb5a1d3e838f

    • SHA1

      654b0644c750c8d3de5f401977a9dae9438ee9fc

    • SHA256

      4d51115033d61a76d782ba377ef23b73512e5de4a0e25fe0c9392ac3ad7b2a13

    • SHA512

      83d5bdd6a4bcd2debc1066ad755e23629b490d9e49640385382f1f5b4706e3d17e5d54e226b4eb33e9319d76f2cfb8cf575e6520d7f14eb7a64f8b34a9a4bd0a

    • SSDEEP

      3072:ymRW8/0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWyF:dAc4QxL7B9W0c1RCzR/fSmlR

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks