Overview

overview

10

Static

static

3

90791353dd...0N.exe

windows7-x64

10

90791353dd...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    90791353dd1e80fe7025a1d7b0ad6cd0N.exe

  • Size

    40KB

  • Sample

    240719-n52jxazdrl

  • MD5

    90791353dd1e80fe7025a1d7b0ad6cd0

  • SHA1

    ab1ea38e1115833e46f67d347b643ee116962df3

  • SHA256

    7026f2ede7859ce605668978dee7ebc9e51dc318e187c95d9c645b7235c19d17

  • SHA512

    8caf8fc0cb8d2d55a36a63b76a0eecca389964d4217e24ef19189df118f6332c9cf38c2f2c0798b06a9963b2f0149b0b6a68b0c8d88784b5c5475c4f977bff57

  • SSDEEP

    768:I7fko/XGmCnxp8F9bdHXtHs7CQpcdHoCCvc:IIcCnP8F95NWee1vc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      90791353dd1e80fe7025a1d7b0ad6cd0N.exe

    • Size

      40KB

    • MD5

      90791353dd1e80fe7025a1d7b0ad6cd0

    • SHA1

      ab1ea38e1115833e46f67d347b643ee116962df3

    • SHA256

      7026f2ede7859ce605668978dee7ebc9e51dc318e187c95d9c645b7235c19d17

    • SHA512

      8caf8fc0cb8d2d55a36a63b76a0eecca389964d4217e24ef19189df118f6332c9cf38c2f2c0798b06a9963b2f0149b0b6a68b0c8d88784b5c5475c4f977bff57

    • SSDEEP

      768:I7fko/XGmCnxp8F9bdHXtHs7CQpcdHoCCvc:IIcCnP8F95NWee1vc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks