Overview

overview

10

Static

static

3

3bb3fc6612...17.exe

windows7-x64

10

3bb3fc6612...17.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3bb3fc6612d6cb99358274e708e70475b1ce4b6ccc7cdd469804dcd5331c9017

  • Size

    216KB

  • Sample

    240421-zktjcabc49

  • MD5

    427ae9919bc22f07e9b106eb288c3478

  • SHA1

    a742980d11f095f3982965107cd121f2b59f6e98

  • SHA256

    3bb3fc6612d6cb99358274e708e70475b1ce4b6ccc7cdd469804dcd5331c9017

  • SHA512

    09cae5442955f1dbed10563f366f24ccda638b2fce1f19df0cd639f12b925fd812ff71e33f76bc1fdeedbab519f9523d17cecc96a65df4e5955fb25c952b4c1c

  • SSDEEP

    6144:H2ZIfrt3+TetonBi3QxRy4g09ICSnqf9uSUgkxtpsaPjK/bEoK828fwAoEn+MR:H2art3+TetonBi3QxRwfnqf9uSUgkxt0

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3bb3fc6612d6cb99358274e708e70475b1ce4b6ccc7cdd469804dcd5331c9017

    • Size

      216KB

    • MD5

      427ae9919bc22f07e9b106eb288c3478

    • SHA1

      a742980d11f095f3982965107cd121f2b59f6e98

    • SHA256

      3bb3fc6612d6cb99358274e708e70475b1ce4b6ccc7cdd469804dcd5331c9017

    • SHA512

      09cae5442955f1dbed10563f366f24ccda638b2fce1f19df0cd639f12b925fd812ff71e33f76bc1fdeedbab519f9523d17cecc96a65df4e5955fb25c952b4c1c

    • SSDEEP

      6144:H2ZIfrt3+TetonBi3QxRy4g09ICSnqf9uSUgkxtpsaPjK/bEoK828fwAoEn+MR:H2art3+TetonBi3QxRwfnqf9uSUgkxt0

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks