Overview

overview

10

Static

static

3

140ecf4ec0...0c.exe

windows7-x64

10

140ecf4ec0...0c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    140ecf4ec0e47bb5ab9f2712780ce22d238386101203aafeab9a105ae61d900c

  • Size

    88KB

  • Sample

    240604-xm276agh96

  • MD5

    681f9b497a0197f61306fc775088f35d

  • SHA1

    7ec231726737335b18b69f3afa0518cc1905eba6

  • SHA256

    140ecf4ec0e47bb5ab9f2712780ce22d238386101203aafeab9a105ae61d900c

  • SHA512

    7efdc71eeceac5a05b509fb981e7a07777721d3d26f6c433d9939af1593eabfcd2e6632a4d24522d0f359a6c3bc4eb551268a16e1e25eecc8c835591a20a3ee2

  • SSDEEP

    768:HO6jxOJETcNnIHpFeh6RM1rA8dOsk7jbqqRkA5okK1DfsvtDzsXjLft+9o1Jz:HOcx/ANILFUnzJA5o9BfItDoXjLl0+z

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      140ecf4ec0e47bb5ab9f2712780ce22d238386101203aafeab9a105ae61d900c

    • Size

      88KB

    • MD5

      681f9b497a0197f61306fc775088f35d

    • SHA1

      7ec231726737335b18b69f3afa0518cc1905eba6

    • SHA256

      140ecf4ec0e47bb5ab9f2712780ce22d238386101203aafeab9a105ae61d900c

    • SHA512

      7efdc71eeceac5a05b509fb981e7a07777721d3d26f6c433d9939af1593eabfcd2e6632a4d24522d0f359a6c3bc4eb551268a16e1e25eecc8c835591a20a3ee2

    • SSDEEP

      768:HO6jxOJETcNnIHpFeh6RM1rA8dOsk7jbqqRkA5okK1DfsvtDzsXjLft+9o1Jz:HOcx/ANILFUnzJA5o9BfItDoXjLl0+z

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks