Overview

overview

10

Static

static

3

566099f468...0N.exe

windows7-x64

10

566099f468...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    566099f468d49f8d05f48840fced8f40N.exe

  • Size

    56KB

  • Sample

    240723-dj99tatgja

  • MD5

    566099f468d49f8d05f48840fced8f40

  • SHA1

    4505385f2b21d5d5ae307cece09b04be30d0bee4

  • SHA256

    7253eb1f81130de4175067db88d29ea680ff653b25230e6cd8944b7c868f7b9b

  • SHA512

    eec09a440c7a8f2b0d9b67b7cad3c991921622bda394290aec2703f921b35e4b2589b82e7e7f47deaa49a0704489f26e9886ff1e8d95c9cde01e876d97061d28

  • SSDEEP

    1536:1TPAYXax6SePlHJuUek/NVSUzYbG2qeSu+zdVJ:7l6UebG2qeSu0VJ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      566099f468d49f8d05f48840fced8f40N.exe

    • Size

      56KB

    • MD5

      566099f468d49f8d05f48840fced8f40

    • SHA1

      4505385f2b21d5d5ae307cece09b04be30d0bee4

    • SHA256

      7253eb1f81130de4175067db88d29ea680ff653b25230e6cd8944b7c868f7b9b

    • SHA512

      eec09a440c7a8f2b0d9b67b7cad3c991921622bda394290aec2703f921b35e4b2589b82e7e7f47deaa49a0704489f26e9886ff1e8d95c9cde01e876d97061d28

    • SSDEEP

      1536:1TPAYXax6SePlHJuUek/NVSUzYbG2qeSu+zdVJ:7l6UebG2qeSu0VJ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks