Overview

overview

10

Static

static

3

fe8c2e7e85...e2.exe

windows7-x64

10

fe8c2e7e85...e2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fe8c2e7e85e6b4f19d791d31fa3c97895a71db6924f705be82ce24878d9d73e2

  • Size

    76KB

  • Sample

    240531-gablnshf72

  • MD5

    4fd65faa04af20657b639f0026ef6cef

  • SHA1

    258ccb630ea2f8eb40b1083ca170c05db1ccc764

  • SHA256

    fe8c2e7e85e6b4f19d791d31fa3c97895a71db6924f705be82ce24878d9d73e2

  • SHA512

    adcd14d026add506ab4f12720bb9c5089f663a733444819ab4d70d9c0b45f8b8477dae39ba802a00ad78d0911640a6770528038b95cd7e91ee09d56421815905

  • SSDEEP

    768:PeIrCmIFHnvA+xOF4/i/BEYkp7P6lweQDhDmpU5GFrrEzWsdSE0d8pUHIkI0Iu5:PLmnvLxO+2G40OIkau5

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fe8c2e7e85e6b4f19d791d31fa3c97895a71db6924f705be82ce24878d9d73e2

    • Size

      76KB

    • MD5

      4fd65faa04af20657b639f0026ef6cef

    • SHA1

      258ccb630ea2f8eb40b1083ca170c05db1ccc764

    • SHA256

      fe8c2e7e85e6b4f19d791d31fa3c97895a71db6924f705be82ce24878d9d73e2

    • SHA512

      adcd14d026add506ab4f12720bb9c5089f663a733444819ab4d70d9c0b45f8b8477dae39ba802a00ad78d0911640a6770528038b95cd7e91ee09d56421815905

    • SSDEEP

      768:PeIrCmIFHnvA+xOF4/i/BEYkp7P6lweQDhDmpU5GFrrEzWsdSE0d8pUHIkI0Iu5:PLmnvLxO+2G40OIkau5

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks