Overview

overview

10

Static

static

3

bccafea1c2...0N.exe

windows7-x64

10

bccafea1c2...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bccafea1c2bf2e217cdfbf18457c0680N.exe

  • Size

    89KB

  • Sample

    240907-ev2mgsvcpb

  • MD5

    bccafea1c2bf2e217cdfbf18457c0680

  • SHA1

    c862f99a4862f0d9b8fd2ae2372d528036be4bf4

  • SHA256

    2c9b1d9cec9e778d008c43f7616c2315dd44e9c6616cb8ae307ff06a553a4618

  • SHA512

    35ad70a35302720aa85ee7ab37a5ccf321333b61904c5cad9322991ef649aab826be47b7a5f2f938da4dab4148a8f62c800646bcba0abe5a64854163217c0035

  • SSDEEP

    1536:71sMveb4lR0daHy9v7Zc86y9U4AFRfBWAEnH:BDeb4T0daHy9DZc86yGUtnH

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      bccafea1c2bf2e217cdfbf18457c0680N.exe

    • Size

      89KB

    • MD5

      bccafea1c2bf2e217cdfbf18457c0680

    • SHA1

      c862f99a4862f0d9b8fd2ae2372d528036be4bf4

    • SHA256

      2c9b1d9cec9e778d008c43f7616c2315dd44e9c6616cb8ae307ff06a553a4618

    • SHA512

      35ad70a35302720aa85ee7ab37a5ccf321333b61904c5cad9322991ef649aab826be47b7a5f2f938da4dab4148a8f62c800646bcba0abe5a64854163217c0035

    • SSDEEP

      1536:71sMveb4lR0daHy9v7Zc86y9U4AFRfBWAEnH:BDeb4T0daHy9DZc86yGUtnH

    Score
    10/10
    discoveryevasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks