Overview

overview

8

Static

static

3

08c44f3c0c...0N.exe

windows7-x64

8

08c44f3c0c...0N.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08c44f3c0c5e903d7b1879b42987a260N.exe

  • Size

    28KB

  • Sample

    240725-zy939avdkn

  • MD5

    08c44f3c0c5e903d7b1879b42987a260

  • SHA1

    3e8c2031989724b9fa0445912eaedf0b96c8b2ca

  • SHA256

    829b3923c5aa4522cc36b4b0fee7ca6c7d34c35a1966703fe1b9da1876822169

  • SHA512

    cab94b0da2c038bc00cb3665f66bdea1e934e49f8a7ef0cd4cbefa197ba20c1dc4124422e4d266642ac7b5415c806a4d6c63886928cd74a9af5f790c3a0c21cf

  • SSDEEP

    384:MqvAXxH6zoHAcIWed4+kSLqrXla7vvxlLjlFVVVV1dFFFFT:zWxMoHNed6a7DZrdFFFFT

Score
8/10
defense_evasiondiscoveryevasion

Malware Config

Targets

    • Target

      08c44f3c0c5e903d7b1879b42987a260N.exe

    • Size

      28KB

    • MD5

      08c44f3c0c5e903d7b1879b42987a260

    • SHA1

      3e8c2031989724b9fa0445912eaedf0b96c8b2ca

    • SHA256

      829b3923c5aa4522cc36b4b0fee7ca6c7d34c35a1966703fe1b9da1876822169

    • SHA512

      cab94b0da2c038bc00cb3665f66bdea1e934e49f8a7ef0cd4cbefa197ba20c1dc4124422e4d266642ac7b5415c806a4d6c63886928cd74a9af5f790c3a0c21cf

    • SSDEEP

      384:MqvAXxH6zoHAcIWed4+kSLqrXla7vvxlLjlFVVVV1dFFFFT:zWxMoHNed6a7DZrdFFFFT

    Score
    8/10
    defense_evasiondiscoveryevasion

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks