Overview

overview

10

Static

static

3

2da71a8bc8...0N.exe

windows7-x64

10

2da71a8bc8...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2da71a8bc8d4bd13349641d9864e21d0N.exe

  • Size

    31KB

  • Sample

    240719-avny6sthqn

  • MD5

    2da71a8bc8d4bd13349641d9864e21d0

  • SHA1

    c40e89cc52aee8167a0db7ac0e3977bbf677db68

  • SHA256

    d02b238c7e0fd6a45a0a0739fee2a527e89e4154bce704baab534f051d8a196b

  • SHA512

    5c7593890d3d61a2ac11bf7d908174d216f75c853c059a0a0f52f793227749e12413eadb9424751140240169d8a8b8c37b5d507446a149302d3657e593a998d5

  • SSDEEP

    768:9lneDDzFOeS7mjGU8zHTHXzXHCzcsHizTxavc:9lnEHdjGU4j5j0vc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2da71a8bc8d4bd13349641d9864e21d0N.exe

    • Size

      31KB

    • MD5

      2da71a8bc8d4bd13349641d9864e21d0

    • SHA1

      c40e89cc52aee8167a0db7ac0e3977bbf677db68

    • SHA256

      d02b238c7e0fd6a45a0a0739fee2a527e89e4154bce704baab534f051d8a196b

    • SHA512

      5c7593890d3d61a2ac11bf7d908174d216f75c853c059a0a0f52f793227749e12413eadb9424751140240169d8a8b8c37b5d507446a149302d3657e593a998d5

    • SSDEEP

      768:9lneDDzFOeS7mjGU8zHTHXzXHCzcsHizTxavc:9lnEHdjGU4j5j0vc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks