Overview

overview

10

Static

static

3

8581038857...5a.exe

windows7-x64

10

8581038857...5a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8581038857c7a438f2b77008133960c8834755fb2a1913ccd64c4849ea223e5a

  • Size

    56KB

  • Sample

    240503-ag7jcscb47

  • MD5

    a6a3ae2aaf39578d88933a5d2572ec5f

  • SHA1

    3c367e67a2ba3c019de17ba8f3338a5a645201fc

  • SHA256

    8581038857c7a438f2b77008133960c8834755fb2a1913ccd64c4849ea223e5a

  • SHA512

    8d894e570248c0d1083caa408b0de1ded67c3831cf52c65df61dfc68fe7d9e44212bdb9482e3fd73a1b9f7ccabc0342270c233cb6435fd96b5fa8392ed69945c

  • SSDEEP

    1536:S3UchKQgnRt9UdLw6BNMyBhXZxHJ6P6D5oL:Ugz07JjD5oL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8581038857c7a438f2b77008133960c8834755fb2a1913ccd64c4849ea223e5a

    • Size

      56KB

    • MD5

      a6a3ae2aaf39578d88933a5d2572ec5f

    • SHA1

      3c367e67a2ba3c019de17ba8f3338a5a645201fc

    • SHA256

      8581038857c7a438f2b77008133960c8834755fb2a1913ccd64c4849ea223e5a

    • SHA512

      8d894e570248c0d1083caa408b0de1ded67c3831cf52c65df61dfc68fe7d9e44212bdb9482e3fd73a1b9f7ccabc0342270c233cb6435fd96b5fa8392ed69945c

    • SSDEEP

      1536:S3UchKQgnRt9UdLw6BNMyBhXZxHJ6P6D5oL:Ugz07JjD5oL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks