Overview

overview

10

Static

static

3

44516cf857...34.exe

windows7-x64

10

44516cf857...34.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44516cf857ffa6c0670d5a98f00c7b7a1ab8205cd18fd892926e07557c2a1234

  • Size

    53KB

  • Sample

    240522-zwqltsge7y

  • MD5

    9b4a7f66605dec7e82869ffc215105eb

  • SHA1

    9cb3601386cb10ced226d91b6f43113f885d653a

  • SHA256

    44516cf857ffa6c0670d5a98f00c7b7a1ab8205cd18fd892926e07557c2a1234

  • SHA512

    89ca5a205df2424734774776eed035f681ed318abafc0ea0039b511f947849c58e9d94d084018d8e74a84618a61fc54252a32b868a9d9821e56955256cfd8c6e

  • SSDEEP

    1536:vNyg8r8QLzRWQi7Kp3StjEMjmLM3ztDJWZsXy4JzxPMk:GRWjJJjmLM3zRJWZsXy4JN

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      44516cf857ffa6c0670d5a98f00c7b7a1ab8205cd18fd892926e07557c2a1234

    • Size

      53KB

    • MD5

      9b4a7f66605dec7e82869ffc215105eb

    • SHA1

      9cb3601386cb10ced226d91b6f43113f885d653a

    • SHA256

      44516cf857ffa6c0670d5a98f00c7b7a1ab8205cd18fd892926e07557c2a1234

    • SHA512

      89ca5a205df2424734774776eed035f681ed318abafc0ea0039b511f947849c58e9d94d084018d8e74a84618a61fc54252a32b868a9d9821e56955256cfd8c6e

    • SSDEEP

      1536:vNyg8r8QLzRWQi7Kp3StjEMjmLM3ztDJWZsXy4JzxPMk:GRWjJJjmLM3zRJWZsXy4JN

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks