Overview

overview

10

Static

static

3

e707cf3dca...e0.exe

windows7-x64

10

e707cf3dca...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e707cf3dca0995aed78333906bbeff9869aec5b736d7a89ccd78cc89156a59e0

  • Size

    200KB

  • Sample

    240425-fba6vsfe37

  • MD5

    7b38a4087ea91238331d8a2ab54cd4a6

  • SHA1

    54f06f4d3ee6a9edcb6ec00a661e355cedfd3e5a

  • SHA256

    e707cf3dca0995aed78333906bbeff9869aec5b736d7a89ccd78cc89156a59e0

  • SHA512

    940344cabee737ebaada2e5dfc92f91642f26ce6f28c090a259b76e0fe008ea98696f6bdd0c74851f1b0cd354bb279c1a25c6ca360590562573e7b63268e811d

  • SSDEEP

    6144:W8R7Knvmb7/D26rfo9Am26fBXMZ8R3FXjrCTYTQdq4qJUGQBSpYCbw6I:jR7Knvmb7/D26zZ8R3FXjrC8T8q4qJgP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e707cf3dca0995aed78333906bbeff9869aec5b736d7a89ccd78cc89156a59e0

    • Size

      200KB

    • MD5

      7b38a4087ea91238331d8a2ab54cd4a6

    • SHA1

      54f06f4d3ee6a9edcb6ec00a661e355cedfd3e5a

    • SHA256

      e707cf3dca0995aed78333906bbeff9869aec5b736d7a89ccd78cc89156a59e0

    • SHA512

      940344cabee737ebaada2e5dfc92f91642f26ce6f28c090a259b76e0fe008ea98696f6bdd0c74851f1b0cd354bb279c1a25c6ca360590562573e7b63268e811d

    • SSDEEP

      6144:W8R7Knvmb7/D26rfo9Am26fBXMZ8R3FXjrCTYTQdq4qJUGQBSpYCbw6I:jR7Knvmb7/D26zZ8R3FXjrC8T8q4qJgP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks