Overview

overview

10

Static

static

3

9c8346ac95...23.exe

windows7-x64

10

9c8346ac95...23.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9c8346ac958fc83972fc1fd30f34912fcb0ae580de33f2f818a2f2a19722cc23

  • Size

    380KB

  • Sample

    240430-axxdbsfd7w

  • MD5

    871118b2098c13e222387fe4e25f0c82

  • SHA1

    87a9df737a9bec5e1ddcc23869fd66c2c9c23ac8

  • SHA256

    9c8346ac958fc83972fc1fd30f34912fcb0ae580de33f2f818a2f2a19722cc23

  • SHA512

    d4c08afbc06d7ab928b495e97e6c7c1b171c7757e8393027a8a8b1bd4ad64453be29fe99d616ccdcd4eecc674462d9a526a9d9d1bd48bc648af1bc44b5bc2943

  • SSDEEP

    6144:vygkzlV+RltuYb4NEzrVCU8TCOqHaC6Y6EX+mnqcXZWgbp1GO:pImRltF4NEzrVCU8Tzq6C6Y6EX+mqcXT

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9c8346ac958fc83972fc1fd30f34912fcb0ae580de33f2f818a2f2a19722cc23

    • Size

      380KB

    • MD5

      871118b2098c13e222387fe4e25f0c82

    • SHA1

      87a9df737a9bec5e1ddcc23869fd66c2c9c23ac8

    • SHA256

      9c8346ac958fc83972fc1fd30f34912fcb0ae580de33f2f818a2f2a19722cc23

    • SHA512

      d4c08afbc06d7ab928b495e97e6c7c1b171c7757e8393027a8a8b1bd4ad64453be29fe99d616ccdcd4eecc674462d9a526a9d9d1bd48bc648af1bc44b5bc2943

    • SSDEEP

      6144:vygkzlV+RltuYb4NEzrVCU8TCOqHaC6Y6EX+mnqcXZWgbp1GO:pImRltF4NEzrVCU8Tzq6C6Y6EX+mqcXT

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks