Overview

overview

10

Static

static

3

7615c8734f...1e.exe

windows7-x64

10

7615c8734f...1e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7615c8734fc70c59c48fefdceb1930ca73b182e97537e8d451d4f49a3c65e31e

  • Size

    76KB

  • Sample

    240611-3nl58awclm

  • MD5

    825c02728dc61ce6dfda719f5e8575d9

  • SHA1

    7565a5ff108255eae5107973d8f27edeaa7761c8

  • SHA256

    7615c8734fc70c59c48fefdceb1930ca73b182e97537e8d451d4f49a3c65e31e

  • SHA512

    acf7f42c6ba77a620f14b17d1710bf3c3604e271e42c9c13a26c970b617c9b4bea94957f0482979a7861f64e3542c1cb6e57560ac718b6e73ad5e630bb099854

  • SSDEEP

    768:weIrCaOEjR9z+xOF4/i/BEYkp7P6lweQDhDmpU5GFrrEzWsdSE0d8pUHIkI0IUL:wLrjSxO+2G40OIkaUL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7615c8734fc70c59c48fefdceb1930ca73b182e97537e8d451d4f49a3c65e31e

    • Size

      76KB

    • MD5

      825c02728dc61ce6dfda719f5e8575d9

    • SHA1

      7565a5ff108255eae5107973d8f27edeaa7761c8

    • SHA256

      7615c8734fc70c59c48fefdceb1930ca73b182e97537e8d451d4f49a3c65e31e

    • SHA512

      acf7f42c6ba77a620f14b17d1710bf3c3604e271e42c9c13a26c970b617c9b4bea94957f0482979a7861f64e3542c1cb6e57560ac718b6e73ad5e630bb099854

    • SSDEEP

      768:weIrCaOEjR9z+xOF4/i/BEYkp7P6lweQDhDmpU5GFrrEzWsdSE0d8pUHIkI0IUL:wLrjSxO+2G40OIkaUL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks