Overview

overview

10

Static

static

3

f3402d2314...ee.exe

windows7-x64

10

f3402d2314...ee.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f3402d2314e8c40ec435f0fffcd0931facfd752be4732d8b8eedd54eeabdbbee

  • Size

    240KB

  • Sample

    240430-e4da9acc66

  • MD5

    3ef875d1a62fac2def29a501d1733984

  • SHA1

    85053192d3b83c04e73919e45361cbeefe0cdc1b

  • SHA256

    f3402d2314e8c40ec435f0fffcd0931facfd752be4732d8b8eedd54eeabdbbee

  • SHA512

    e767f1d21d9c8f46bc023e34e78f49a2620255bb1170bc9ae66622fdca54580bfe096ba6b645cf0ae4957967e94da8e40adb2aa5f3e43109d9bb78f7aea4dad2

  • SSDEEP

    6144:UkGFThz+4OAY0kmg7JXK84vxim1EHlXnJJIyMAf5W/SbDHeIuy0bgx:grz+4OAY0kmg7JXK9yMAf5W/SbCIXWA

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f3402d2314e8c40ec435f0fffcd0931facfd752be4732d8b8eedd54eeabdbbee

    • Size

      240KB

    • MD5

      3ef875d1a62fac2def29a501d1733984

    • SHA1

      85053192d3b83c04e73919e45361cbeefe0cdc1b

    • SHA256

      f3402d2314e8c40ec435f0fffcd0931facfd752be4732d8b8eedd54eeabdbbee

    • SHA512

      e767f1d21d9c8f46bc023e34e78f49a2620255bb1170bc9ae66622fdca54580bfe096ba6b645cf0ae4957967e94da8e40adb2aa5f3e43109d9bb78f7aea4dad2

    • SSDEEP

      6144:UkGFThz+4OAY0kmg7JXK84vxim1EHlXnJJIyMAf5W/SbDHeIuy0bgx:grz+4OAY0kmg7JXK9yMAf5W/SbCIXWA

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks