Overview

overview

10

Static

static

3

1be87792a0...ed.exe

windows7-x64

10

1be87792a0...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1be87792a07f8f9ad9b12a5f9a14c225634f4cd03bb1aa82637984c6299cf2ed

  • Size

    56KB

  • Sample

    240421-xzhz2sac4s

  • MD5

    917c6cc6e5b048e49a7643420e159f00

  • SHA1

    29443ce4b55d294023a2282df82508f86dee117d

  • SHA256

    1be87792a07f8f9ad9b12a5f9a14c225634f4cd03bb1aa82637984c6299cf2ed

  • SHA512

    b0d95a1c9b74f25f3a285ec04d4853277f889cbd997a2e7a87e0a9fd52160994c90845e4a94214d2a865c1ca79fee23b7e4cdb6653c54383373f26083ad17947

  • SSDEEP

    1536:SqkcMAQgnRt9UdLw6BNMyBhXZxHJ6P6D5B0qEy:Mgz07JjD5B7

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1be87792a07f8f9ad9b12a5f9a14c225634f4cd03bb1aa82637984c6299cf2ed

    • Size

      56KB

    • MD5

      917c6cc6e5b048e49a7643420e159f00

    • SHA1

      29443ce4b55d294023a2282df82508f86dee117d

    • SHA256

      1be87792a07f8f9ad9b12a5f9a14c225634f4cd03bb1aa82637984c6299cf2ed

    • SHA512

      b0d95a1c9b74f25f3a285ec04d4853277f889cbd997a2e7a87e0a9fd52160994c90845e4a94214d2a865c1ca79fee23b7e4cdb6653c54383373f26083ad17947

    • SSDEEP

      1536:SqkcMAQgnRt9UdLw6BNMyBhXZxHJ6P6D5B0qEy:Mgz07JjD5B7

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks