Overview

overview

10

Static

static

3

72fa389996...d3.exe

windows7-x64

10

72fa389996...d3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    72fa389996741c2c11a188f8870c1309a46625fa65ea6459bf6379153eb7e7d3

  • Size

    216KB

  • Sample

    240501-27kk3ahh4t

  • MD5

    3c3d08154348526fab6e6dfc29c460c3

  • SHA1

    75a2e4897ebbbf6b0b15347aadea33b87e6927a1

  • SHA256

    72fa389996741c2c11a188f8870c1309a46625fa65ea6459bf6379153eb7e7d3

  • SHA512

    c3bdf13f373962439b380426ccd440782fe0d1c7986e25e9db788f58518f6a9d79742440b3e58620afc136105eced306a78aa330c7f57173b4ede5f480c87d85

  • SSDEEP

    6144:H20Ifrt3+TetonBi3QxRy4g09ICSnqf9uSUgkxtpsaPjK/bEoK828fwAoEn+Mq:H2vrt3+TetonBi3QxRwfnqf9uSUgkxtb

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      72fa389996741c2c11a188f8870c1309a46625fa65ea6459bf6379153eb7e7d3

    • Size

      216KB

    • MD5

      3c3d08154348526fab6e6dfc29c460c3

    • SHA1

      75a2e4897ebbbf6b0b15347aadea33b87e6927a1

    • SHA256

      72fa389996741c2c11a188f8870c1309a46625fa65ea6459bf6379153eb7e7d3

    • SHA512

      c3bdf13f373962439b380426ccd440782fe0d1c7986e25e9db788f58518f6a9d79742440b3e58620afc136105eced306a78aa330c7f57173b4ede5f480c87d85

    • SSDEEP

      6144:H20Ifrt3+TetonBi3QxRy4g09ICSnqf9uSUgkxtpsaPjK/bEoK828fwAoEn+Mq:H2vrt3+TetonBi3QxRwfnqf9uSUgkxtb

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks