Overview

overview

10

Static

static

3

b3668f3d33...ea.exe

windows7-x64

10

b3668f3d33...ea.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b3668f3d332cafc8a2c5f839597ad46d789e9bab94aebd78a00edb97d3f828ea

  • Size

    216KB

  • Sample

    240417-dqyjladf4z

  • MD5

    827aded13ee9974ac11514574a30107a

  • SHA1

    cfbebd381d8d3e6a3a76b8f73db2ceca34a5aafd

  • SHA256

    b3668f3d332cafc8a2c5f839597ad46d789e9bab94aebd78a00edb97d3f828ea

  • SHA512

    0706d23bfbd7125c38b6d5b6d505ea4d6d234932aadf18ad3b548de04ae4943e66e080c7c0d1c906996cbcbd162d6d2202a573c4e442dc7765f6d93f2ce3dd3d

  • SSDEEP

    3072:UKqJIu3uXu9h4961DO+kgbQHOtEOUXsjn2:tMhWaD3kP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b3668f3d332cafc8a2c5f839597ad46d789e9bab94aebd78a00edb97d3f828ea

    • Size

      216KB

    • MD5

      827aded13ee9974ac11514574a30107a

    • SHA1

      cfbebd381d8d3e6a3a76b8f73db2ceca34a5aafd

    • SHA256

      b3668f3d332cafc8a2c5f839597ad46d789e9bab94aebd78a00edb97d3f828ea

    • SHA512

      0706d23bfbd7125c38b6d5b6d505ea4d6d234932aadf18ad3b548de04ae4943e66e080c7c0d1c906996cbcbd162d6d2202a573c4e442dc7765f6d93f2ce3dd3d

    • SSDEEP

      3072:UKqJIu3uXu9h4961DO+kgbQHOtEOUXsjn2:tMhWaD3kP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks