Overview

overview

10

Static

static

3

503847f5c7...94.exe

windows7-x64

10

503847f5c7...94.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    503847f5c79467322edcb1fba56cb71f8cc60b89184e58ef46da54b98c54f094

  • Size

    196KB

  • Sample

    240522-1fsa6ahg63

  • MD5

    da26a6ff03ea47465a0ec01a4f5fa368

  • SHA1

    6d902dede39364f0484b50a6c7724ee056614b43

  • SHA256

    503847f5c79467322edcb1fba56cb71f8cc60b89184e58ef46da54b98c54f094

  • SHA512

    eb3d1b7b9864b187373f0fd70d8609b84abefac576734894b6392abd6c603cc3137ba030fee27e78f7c3a37a2601210d8d275f719da566c43ac3e2624e42edb0

  • SSDEEP

    6144:PUGAEbNsK/fObT/bGikE6xI1XwiY+ZAcdA+UEBuidnN:cGAEbNsK/fObT/bGib1XwiYwUUu4

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      503847f5c79467322edcb1fba56cb71f8cc60b89184e58ef46da54b98c54f094

    • Size

      196KB

    • MD5

      da26a6ff03ea47465a0ec01a4f5fa368

    • SHA1

      6d902dede39364f0484b50a6c7724ee056614b43

    • SHA256

      503847f5c79467322edcb1fba56cb71f8cc60b89184e58ef46da54b98c54f094

    • SHA512

      eb3d1b7b9864b187373f0fd70d8609b84abefac576734894b6392abd6c603cc3137ba030fee27e78f7c3a37a2601210d8d275f719da566c43ac3e2624e42edb0

    • SSDEEP

      6144:PUGAEbNsK/fObT/bGikE6xI1XwiY+ZAcdA+UEBuidnN:cGAEbNsK/fObT/bGib1XwiYwUUu4

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks