Overview

overview

10

Static

static

3

095a509859...07.exe

windows7-x64

10

095a509859...07.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    095a509859a5993c024a038862ad080794de40d3f91347db6a0264f7f8709c07

  • Size

    53KB

  • Sample

    240521-w2zj5seb9x

  • MD5

    18cc8fbfa8cd10d3e45829ea16cb4a3c

  • SHA1

    bc67a5229f09a0c797f9969dee86451b96b91f63

  • SHA256

    095a509859a5993c024a038862ad080794de40d3f91347db6a0264f7f8709c07

  • SHA512

    347a987c127e04ce6676f96cdea96300149d6c4b20d3a6bfe46ea00abf655ad8c6f27c225d123e36f88f0f2f521af0bcdcef323c9744a7f7db0438b36858b541

  • SSDEEP

    1536:vNzg8r8QU+tvk7Kp3StjEMjmLM3ztDJWZsXy4JzxPMU:O+tMJJjmLM3zRJWZsXy4J9

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      095a509859a5993c024a038862ad080794de40d3f91347db6a0264f7f8709c07

    • Size

      53KB

    • MD5

      18cc8fbfa8cd10d3e45829ea16cb4a3c

    • SHA1

      bc67a5229f09a0c797f9969dee86451b96b91f63

    • SHA256

      095a509859a5993c024a038862ad080794de40d3f91347db6a0264f7f8709c07

    • SHA512

      347a987c127e04ce6676f96cdea96300149d6c4b20d3a6bfe46ea00abf655ad8c6f27c225d123e36f88f0f2f521af0bcdcef323c9744a7f7db0438b36858b541

    • SSDEEP

      1536:vNzg8r8QU+tvk7Kp3StjEMjmLM3ztDJWZsXy4JzxPMU:O+tMJJjmLM3zRJWZsXy4J9

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks