Overview

overview

7

Static

static

3

20d15ddc7f...0N.exe

windows7-x64

7

20d15ddc7f...0N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20d15ddc7fc533320470adb46b29a0c0N.exe

  • Size

    55KB

  • Sample

    240819-b8at5s1ckj

  • MD5

    20d15ddc7fc533320470adb46b29a0c0

  • SHA1

    691982118324ce183649863e3031f5fcc998c703

  • SHA256

    f22fdab0a86dda1291d49f719577c25c29d0645bc70f69ab7e7af2d1a847fd8e

  • SHA512

    78b197060724bb962473bd4ba00db6253dd86501bbd16bdd0f41c4eab59792fc07393fbf15ae14addbf21b272e3d38bc33cc766f9aa3441ec6ad8905a3bba60b

  • SSDEEP

    1536:hvQoLHjw2iWPKMvw71/RLyX3NvvvZeee5w:hv5Ls27BIJ/RLyX3HeeeS

Score
7/10
defense_evasiondiscovery

Malware Config

Targets

    • Target

      20d15ddc7fc533320470adb46b29a0c0N.exe

    • Size

      55KB

    • MD5

      20d15ddc7fc533320470adb46b29a0c0

    • SHA1

      691982118324ce183649863e3031f5fcc998c703

    • SHA256

      f22fdab0a86dda1291d49f719577c25c29d0645bc70f69ab7e7af2d1a847fd8e

    • SHA512

      78b197060724bb962473bd4ba00db6253dd86501bbd16bdd0f41c4eab59792fc07393fbf15ae14addbf21b272e3d38bc33cc766f9aa3441ec6ad8905a3bba60b

    • SSDEEP

      1536:hvQoLHjw2iWPKMvw71/RLyX3NvvvZeee5w:hv5Ls27BIJ/RLyX3HeeeS

    Score
    7/10
    defense_evasiondiscovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks