Overview

overview

10

Static

static

3

1faf894f07...00.exe

windows7-x64

10

1faf894f07...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1faf894f070ac48d038b27ed560dff00

  • Size

    196KB

  • Sample

    240410-gfjt8she6w

  • MD5

    1faf894f070ac48d038b27ed560dff00

  • SHA1

    fca6afefade89fd28980576541b39ba3cbc356c5

  • SHA256

    8a969e0d31f85063106658997a3a0bab57949277857b1b9992155b8161d5e481

  • SHA512

    70436aa8c8b2271b73f97ea09cd4b013d539e7c34fa161e7132902f79c4e1f7f6680f6a048a65b21ad3de1d9c1f3cbc5392efa3818bec24dfe52e5a320c60fda

  • SSDEEP

    1536:PNqk3NV5XqOaZk1GDGe0Pdb+d6DiUYot00gw3:sw5XyzDDypy6DiUru0gE

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1faf894f070ac48d038b27ed560dff00

    • Size

      196KB

    • MD5

      1faf894f070ac48d038b27ed560dff00

    • SHA1

      fca6afefade89fd28980576541b39ba3cbc356c5

    • SHA256

      8a969e0d31f85063106658997a3a0bab57949277857b1b9992155b8161d5e481

    • SHA512

      70436aa8c8b2271b73f97ea09cd4b013d539e7c34fa161e7132902f79c4e1f7f6680f6a048a65b21ad3de1d9c1f3cbc5392efa3818bec24dfe52e5a320c60fda

    • SSDEEP

      1536:PNqk3NV5XqOaZk1GDGe0Pdb+d6DiUYot00gw3:sw5XyzDDypy6DiUru0gE

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks