Overview

overview

10

Static

static

3

bf3f71e422...41.exe

windows7-x64

10

bf3f71e422...41.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf3f71e42268a8e16f4ef070523e14c6f0d61329da86ea0866cf3e9383206241

  • Size

    67KB

  • Sample

    240423-dvktascc42

  • MD5

    5c36faf273700c2d19d5d6f31fe48eca

  • SHA1

    fdad6f9d92825944e0d89c6b5c4fe1ea2684716f

  • SHA256

    bf3f71e42268a8e16f4ef070523e14c6f0d61329da86ea0866cf3e9383206241

  • SHA512

    97485dee0c682ee37c007fc39e215a8d21b3a9edaf91b1948e6696fb65e477238088fef10ab8aca0a98d16ac87a8fbdd5a7a35f647447b42600857cb63e4bcf6

  • SSDEEP

    768:gGZ+QyvFmsdvgOpU/WGGIegFDhNmvdMYXqYt1NEDIefZsD:gi7cvgO2/rEgzNLoZt1y

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      bf3f71e42268a8e16f4ef070523e14c6f0d61329da86ea0866cf3e9383206241

    • Size

      67KB

    • MD5

      5c36faf273700c2d19d5d6f31fe48eca

    • SHA1

      fdad6f9d92825944e0d89c6b5c4fe1ea2684716f

    • SHA256

      bf3f71e42268a8e16f4ef070523e14c6f0d61329da86ea0866cf3e9383206241

    • SHA512

      97485dee0c682ee37c007fc39e215a8d21b3a9edaf91b1948e6696fb65e477238088fef10ab8aca0a98d16ac87a8fbdd5a7a35f647447b42600857cb63e4bcf6

    • SSDEEP

      768:gGZ+QyvFmsdvgOpU/WGGIegFDhNmvdMYXqYt1NEDIefZsD:gi7cvgO2/rEgzNLoZt1y

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks