Overview

overview

10

Static

static

3

e4ecfdcf7f...4b.exe

windows7-x64

10

e4ecfdcf7f...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4ecfdcf7f20619b24ac5d06db56e638572e87e8c022ef6180657575217ba84b

  • Size

    256KB

  • Sample

    240420-enlbxsgg7t

  • MD5

    b73405d01e47b1ced4fc0d09f39bebbf

  • SHA1

    712def88b1949b9b8a40faec73d65f644ac6af5c

  • SHA256

    e4ecfdcf7f20619b24ac5d06db56e638572e87e8c022ef6180657575217ba84b

  • SHA512

    240067e012664da458bd0e042ffa8ed7c572433d2e5937078137cb54294538a76b120b8ec5294620ca73329ebc5aa7e34f0d776862376079c4ab0b22b2aef3b8

  • SSDEEP

    3072:40bfWRrIMNRlZ62Pal2LBJXmzOHm5WZ3K+MC5OQ39cOaRr5ZGPVB:4Wepp3PJXCOGY3eQOQ39cC

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e4ecfdcf7f20619b24ac5d06db56e638572e87e8c022ef6180657575217ba84b

    • Size

      256KB

    • MD5

      b73405d01e47b1ced4fc0d09f39bebbf

    • SHA1

      712def88b1949b9b8a40faec73d65f644ac6af5c

    • SHA256

      e4ecfdcf7f20619b24ac5d06db56e638572e87e8c022ef6180657575217ba84b

    • SHA512

      240067e012664da458bd0e042ffa8ed7c572433d2e5937078137cb54294538a76b120b8ec5294620ca73329ebc5aa7e34f0d776862376079c4ab0b22b2aef3b8

    • SSDEEP

      3072:40bfWRrIMNRlZ62Pal2LBJXmzOHm5WZ3K+MC5OQ39cOaRr5ZGPVB:4Wepp3PJXCOGY3eQOQ39cC

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks