Overview

overview

10

Static

static

3

671a643750...2c.exe

windows7-x64

10

671a643750...2c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    671a643750fe61765b9994399adb974c1df15bf3e3d758fa5c6f6e1c7b94732c

  • Size

    156KB

  • Sample

    240424-vfx9hsde47

  • MD5

    67690938acce87ebb74d13a1f370278f

  • SHA1

    fcd5de62f2097880e8de21ff9766ef13ad4550fd

  • SHA256

    671a643750fe61765b9994399adb974c1df15bf3e3d758fa5c6f6e1c7b94732c

  • SHA512

    19c172de9747baedc5901fb46acfe2fa0d77742dc8605fd9f271638f5ce9bd56d2b2aa7fcc464752993d5a5927089acb70b92393517a67adfe2bf0c4e247c71a

  • SSDEEP

    3072:tKz/SpGbGb6JUBGnvZHpXtNLdZkkVYaZvLStH/h7yc2dV4oQZiEuE2:YbjbGb6JaGnvZZtNLdZkRapLmH8c2dn9

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      671a643750fe61765b9994399adb974c1df15bf3e3d758fa5c6f6e1c7b94732c

    • Size

      156KB

    • MD5

      67690938acce87ebb74d13a1f370278f

    • SHA1

      fcd5de62f2097880e8de21ff9766ef13ad4550fd

    • SHA256

      671a643750fe61765b9994399adb974c1df15bf3e3d758fa5c6f6e1c7b94732c

    • SHA512

      19c172de9747baedc5901fb46acfe2fa0d77742dc8605fd9f271638f5ce9bd56d2b2aa7fcc464752993d5a5927089acb70b92393517a67adfe2bf0c4e247c71a

    • SSDEEP

      3072:tKz/SpGbGb6JUBGnvZHpXtNLdZkkVYaZvLStH/h7yc2dV4oQZiEuE2:YbjbGb6JaGnvZZtNLdZkRapLmH8c2dn9

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks