Overview

overview

10

Static

static

10

360setr.exe

windows7-x64

8

360setr.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    360setr.exe

  • Size

    48KB

  • Sample

    240611-yn95tszbnn

  • MD5

    483fe860119307c2f9e2f7ed4caadc81

  • SHA1

    b5fa21f06419e585cb9faa7227f1931a8521ca5f

  • SHA256

    acee72d648216217f6208a6d648767f06252a72aa3a8f4bf88de049eecb27c23

  • SHA512

    4590310719d9a253e71dcb46775029d1213c87f21d6d002ec78584cc5eece9fdf169af174ae287a9328c81c1699927b552fdb1b4b8d1b59f706511ae48b142c7

  • SSDEEP

    768:zynb12Aw5J6HC4kq5Jp9bjAzhyY55J+NStcEeUlyqgZl4p67dhPC:Ub1MsHz3JDwhyWr+N95OTga6u

Score
10/10
runningratpersistence

Malware Config

Targets

    • Target

      360setr.exe

    • Size

      48KB

    • MD5

      483fe860119307c2f9e2f7ed4caadc81

    • SHA1

      b5fa21f06419e585cb9faa7227f1931a8521ca5f

    • SHA256

      acee72d648216217f6208a6d648767f06252a72aa3a8f4bf88de049eecb27c23

    • SHA512

      4590310719d9a253e71dcb46775029d1213c87f21d6d002ec78584cc5eece9fdf169af174ae287a9328c81c1699927b552fdb1b4b8d1b59f706511ae48b142c7

    • SSDEEP

      768:zynb12Aw5J6HC4kq5Jp9bjAzhyY55J+NStcEeUlyqgZl4p67dhPC:Ub1MsHz3JDwhyWr+N95OTga6u

    Score
    8/10
    persistence

    • Sets DLL path for service in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a Windows Service

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks