Overview

overview

10

Static

static

3

d5eb06b082...e6.exe

windows7-x64

10

d5eb06b082...e6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d5eb06b0824491cb8a590e8b40727639533509e70b708e2a38ac1d85655c0fe6

  • Size

    40KB

  • Sample

    240517-fa7tfahh63

  • MD5

    5e3d63b85570b43db76465743ab21b6c

  • SHA1

    50523a917645d60afa8f35e83a206d3d3267d999

  • SHA256

    d5eb06b0824491cb8a590e8b40727639533509e70b708e2a38ac1d85655c0fe6

  • SHA512

    4807f06b90b328c9b52ca96a0f0c4431ff252c0316ad15db78229550aaf93dc02b734ca196a3fb903c8eba0ffb0dd261b1ef2a2acd790a9d3280bb5df036b24a

  • SSDEEP

    768:Uvfko/Xecrrzp8F9bdHXtHs7CQpcdHoCCvc:UEirr18F95NWee1vc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d5eb06b0824491cb8a590e8b40727639533509e70b708e2a38ac1d85655c0fe6

    • Size

      40KB

    • MD5

      5e3d63b85570b43db76465743ab21b6c

    • SHA1

      50523a917645d60afa8f35e83a206d3d3267d999

    • SHA256

      d5eb06b0824491cb8a590e8b40727639533509e70b708e2a38ac1d85655c0fe6

    • SHA512

      4807f06b90b328c9b52ca96a0f0c4431ff252c0316ad15db78229550aaf93dc02b734ca196a3fb903c8eba0ffb0dd261b1ef2a2acd790a9d3280bb5df036b24a

    • SSDEEP

      768:Uvfko/Xecrrzp8F9bdHXtHs7CQpcdHoCCvc:UEirr18F95NWee1vc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks