Overview

overview

10

Static

static

3

ff0d89a985...1d.exe

windows7-x64

10

ff0d89a985...1d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ff0d89a9850dda22ec97fc8767739d3f619bee4d6dc2af07ef0e6e1fb7a5281d

  • Size

    56KB

  • Sample

    240703-fykzksyhjg

  • MD5

    86fa718dfbc4c8c92a363ed00366aa93

  • SHA1

    43a61fdbb3986fcb119e4b1004229118406660b7

  • SHA256

    ff0d89a9850dda22ec97fc8767739d3f619bee4d6dc2af07ef0e6e1fb7a5281d

  • SHA512

    edb8f1ffd1abd5754272c5eb8e418a92d280877ab712c0be006fb9a4e13e143f7bc4656a3a1f2e12de0407294c984e2cf2c7f3134d197e3026f384c39d148502

  • SSDEEP

    768:/1Em9rIKP/pUfpfsmT3/M/iLCJXeXlXsX3XKnHYkcUckZ+9w98kMEk71s:N3Ph4D8HOXlXsX3XnkcUckD98kMEk7K

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ff0d89a9850dda22ec97fc8767739d3f619bee4d6dc2af07ef0e6e1fb7a5281d

    • Size

      56KB

    • MD5

      86fa718dfbc4c8c92a363ed00366aa93

    • SHA1

      43a61fdbb3986fcb119e4b1004229118406660b7

    • SHA256

      ff0d89a9850dda22ec97fc8767739d3f619bee4d6dc2af07ef0e6e1fb7a5281d

    • SHA512

      edb8f1ffd1abd5754272c5eb8e418a92d280877ab712c0be006fb9a4e13e143f7bc4656a3a1f2e12de0407294c984e2cf2c7f3134d197e3026f384c39d148502

    • SSDEEP

      768:/1Em9rIKP/pUfpfsmT3/M/iLCJXeXlXsX3XKnHYkcUckZ+9w98kMEk71s:N3Ph4D8HOXlXsX3XnkcUckD98kMEk7K

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks