Overview

overview

10

Static

static

3

595b798d04...61.exe

windows7-x64

10

595b798d04...61.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    595b798d044d4a504bfe8e2be3d1e271373311675a1f96d64bcfe8c850a10e61

  • Size

    240KB

  • Sample

    240424-twzxlsdb8w

  • MD5

    549a0d7353a08ae16e0e5ee3fba5eb2f

  • SHA1

    3a78241db359929f3362d43ce898708937ab6f79

  • SHA256

    595b798d044d4a504bfe8e2be3d1e271373311675a1f96d64bcfe8c850a10e61

  • SHA512

    db308f1e7a6755e65554846f248bab4280b39f41f6346aeec1ec9601179ce5d3f24c06ae8e5690699036b758d89411df5210eef04b3837c61201515111077df1

  • SSDEEP

    6144:kot55UtO7RQjX7XN1kd9JbSDviiopNDa/N08iY/k:i4xNMk

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      595b798d044d4a504bfe8e2be3d1e271373311675a1f96d64bcfe8c850a10e61

    • Size

      240KB

    • MD5

      549a0d7353a08ae16e0e5ee3fba5eb2f

    • SHA1

      3a78241db359929f3362d43ce898708937ab6f79

    • SHA256

      595b798d044d4a504bfe8e2be3d1e271373311675a1f96d64bcfe8c850a10e61

    • SHA512

      db308f1e7a6755e65554846f248bab4280b39f41f6346aeec1ec9601179ce5d3f24c06ae8e5690699036b758d89411df5210eef04b3837c61201515111077df1

    • SSDEEP

      6144:kot55UtO7RQjX7XN1kd9JbSDviiopNDa/N08iY/k:i4xNMk

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks