Overview

overview

10

Static

static

3

2386c56b58...e2.exe

windows7-x64

10

2386c56b58...e2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2386c56b58b61bc48703939fd84700dd53b468b030b7f809c7d905826295d0e2

  • Size

    76KB

  • Sample

    240602-yln5ksda4v

  • MD5

    24d69cc6ecf5234d10a2d74cbdc32fab

  • SHA1

    59f75350edd6b8cfb011954896d8645cca993e60

  • SHA256

    2386c56b58b61bc48703939fd84700dd53b468b030b7f809c7d905826295d0e2

  • SHA512

    1474094143973b54c600f44d8c37edfbe176527d8ec896a54377c9daa986c82362c70c54ba269c3b1f005582658bb8ff7cc4848574b0c67d37ab6d41d29f4420

  • SSDEEP

    768:vWIrCCk5fm9+xOF4/i/BEYkp7P6lweQDhDmpU5GFrrEzWsdSE0d8pUHIkI0IEL:vjw/xO+2G40OIkaEL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2386c56b58b61bc48703939fd84700dd53b468b030b7f809c7d905826295d0e2

    • Size

      76KB

    • MD5

      24d69cc6ecf5234d10a2d74cbdc32fab

    • SHA1

      59f75350edd6b8cfb011954896d8645cca993e60

    • SHA256

      2386c56b58b61bc48703939fd84700dd53b468b030b7f809c7d905826295d0e2

    • SHA512

      1474094143973b54c600f44d8c37edfbe176527d8ec896a54377c9daa986c82362c70c54ba269c3b1f005582658bb8ff7cc4848574b0c67d37ab6d41d29f4420

    • SSDEEP

      768:vWIrCCk5fm9+xOF4/i/BEYkp7P6lweQDhDmpU5GFrrEzWsdSE0d8pUHIkI0IEL:vjw/xO+2G40OIkaEL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks