Overview

overview

10

Static

static

3

9f1e409022...3f.exe

windows7-x64

10

9f1e409022...3f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9f1e4090221b943a2d89b89044319a9663d7ff4537f79c1c2da8dac88933683f

  • Size

    192KB

  • Sample

    240417-cp4tjsce6z

  • MD5

    2cf4e17093a0d09ccbf74d8f26c8b8c2

  • SHA1

    352e40ecb459556f8529ffc9dcc98e32bb9ded58

  • SHA256

    9f1e4090221b943a2d89b89044319a9663d7ff4537f79c1c2da8dac88933683f

  • SHA512

    a08f6cc09b49ab9228fa1b01f1308a131f3bd31045d91f9d92ea41e9497e5700dd21bfbcf9690555e9c3b5a9d2c7153ec4156cb8946c1ecddb32bf4014d350eb

  • SSDEEP

    3072:FebBDpnvJUhfykwxvGQHhTiZemK/fObT/bGiU7dCyUHb9rXDdcNcXYW:8NNvJUARhKK/fObT/bGiUJCyMrXDdBd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9f1e4090221b943a2d89b89044319a9663d7ff4537f79c1c2da8dac88933683f

    • Size

      192KB

    • MD5

      2cf4e17093a0d09ccbf74d8f26c8b8c2

    • SHA1

      352e40ecb459556f8529ffc9dcc98e32bb9ded58

    • SHA256

      9f1e4090221b943a2d89b89044319a9663d7ff4537f79c1c2da8dac88933683f

    • SHA512

      a08f6cc09b49ab9228fa1b01f1308a131f3bd31045d91f9d92ea41e9497e5700dd21bfbcf9690555e9c3b5a9d2c7153ec4156cb8946c1ecddb32bf4014d350eb

    • SSDEEP

      3072:FebBDpnvJUhfykwxvGQHhTiZemK/fObT/bGiU7dCyUHb9rXDdcNcXYW:8NNvJUARhKK/fObT/bGiUJCyMrXDdBd

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks