Overview

overview

8

Static

static

3

fc2fe6de0c...0N.exe

windows7-x64

8

fc2fe6de0c...0N.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc2fe6de0c2c57302dc9dc0c272ee380N.exe

  • Size

    34KB

  • Sample

    240824-n526fayfjf

  • MD5

    fc2fe6de0c2c57302dc9dc0c272ee380

  • SHA1

    7f20997b80fbd815a778e1550675ba260137e091

  • SHA256

    d753105159529e34e1f98e13792b6a2f4898be0405905e31957f2a1ccb09a9b4

  • SHA512

    0708f3e993c26f5bbc83fdd31e03890ee2f2032c72b0e3a61bd5aa3586e0fc21c8d3c7c60b41bef2c54be057109b985a756c34c00aaf438d4c4dd8068929c94d

  • SSDEEP

    384:Pqc8W5JenQ05X9pZGmvt72B6zS3Gf1qpwPI9vpuR27vvxlLbKKDltl9HrT4:wQ0npvVYYhf1auI9vpe27DbXtlBT4

Score
8/10
defense_evasiondiscoveryevasion

Malware Config

Targets

    • Target

      fc2fe6de0c2c57302dc9dc0c272ee380N.exe

    • Size

      34KB

    • MD5

      fc2fe6de0c2c57302dc9dc0c272ee380

    • SHA1

      7f20997b80fbd815a778e1550675ba260137e091

    • SHA256

      d753105159529e34e1f98e13792b6a2f4898be0405905e31957f2a1ccb09a9b4

    • SHA512

      0708f3e993c26f5bbc83fdd31e03890ee2f2032c72b0e3a61bd5aa3586e0fc21c8d3c7c60b41bef2c54be057109b985a756c34c00aaf438d4c4dd8068929c94d

    • SSDEEP

      384:Pqc8W5JenQ05X9pZGmvt72B6zS3Gf1qpwPI9vpuR27vvxlLbKKDltl9HrT4:wQ0npvVYYhf1auI9vpe27DbXtlBT4

    Score
    8/10
    defense_evasiondiscoveryevasion

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks