Overview

overview

7

Static

static

3

b4ff9f720f...0N.exe

windows7-x64

7

b4ff9f720f...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4ff9f720fb4f08318d7f1fe74051dc0N

  • Size

    105KB

  • Sample

    240908-xewqea1cjn

  • MD5

    b4ff9f720fb4f08318d7f1fe74051dc0

  • SHA1

    759b6cd154ab39b8d4d31f49408bc072c41ba43d

  • SHA256

    35fd281b2ade9fa6d71a954ca725fbab2ece615842559e13f3e8cd6c605ba90d

  • SHA512

    90415c62417ef530b2315231c55a4a43d3f9dbea9d5624a13c9217fe4f3d0ca55c9f4cfbd3195a8706f414d1592ee6d4b9cf83eaafeb671942919314f2a227e1

  • SSDEEP

    1536:vE3qz4ayX9ioT5Xl8lQWj1vTo5G6kvBzodfjZw4jk5thwtsF:C79l86WqGzIfjZwik5tpF

Score
7/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      b4ff9f720fb4f08318d7f1fe74051dc0N

    • Size

      105KB

    • MD5

      b4ff9f720fb4f08318d7f1fe74051dc0

    • SHA1

      759b6cd154ab39b8d4d31f49408bc072c41ba43d

    • SHA256

      35fd281b2ade9fa6d71a954ca725fbab2ece615842559e13f3e8cd6c605ba90d

    • SHA512

      90415c62417ef530b2315231c55a4a43d3f9dbea9d5624a13c9217fe4f3d0ca55c9f4cfbd3195a8706f414d1592ee6d4b9cf83eaafeb671942919314f2a227e1

    • SSDEEP

      1536:vE3qz4ayX9ioT5Xl8lQWj1vTo5G6kvBzodfjZw4jk5thwtsF:C79l86WqGzIfjZwik5tpF

    Score
    7/10
    defense_evasiondiscoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks