Overview

overview

10

Static

static

3

dc198c031c...0N.exe

windows7-x64

10

dc198c031c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dc198c031c2d7da9d0472b98016940e0N

  • Size

    148KB

  • Sample

    240913-ze5pesxeqp

  • MD5

    dc198c031c2d7da9d0472b98016940e0

  • SHA1

    f4bfc6e6b3a60058e79061c4cbb1649438438546

  • SHA256

    03878c38b209b95a2027754f6944e85ee5135012a90974213409683d5e59f995

  • SHA512

    6c4016d4cc223387822fd16c3027c7db35390b30ef8dee26bf4b9284c626ab9a8b2e87b0135a10fd52e6745397a2efbac3df21ad408386a80fafacbdb860dafe

  • SSDEEP

    3072:/iFcQh4mRpDGq7At/yRWr2wA36nbMUq8hFOdhIk4oQZiEMsShL:KFXh96F90Wf7nJPwdzWqL

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      dc198c031c2d7da9d0472b98016940e0N

    • Size

      148KB

    • MD5

      dc198c031c2d7da9d0472b98016940e0

    • SHA1

      f4bfc6e6b3a60058e79061c4cbb1649438438546

    • SHA256

      03878c38b209b95a2027754f6944e85ee5135012a90974213409683d5e59f995

    • SHA512

      6c4016d4cc223387822fd16c3027c7db35390b30ef8dee26bf4b9284c626ab9a8b2e87b0135a10fd52e6745397a2efbac3df21ad408386a80fafacbdb860dafe

    • SSDEEP

      3072:/iFcQh4mRpDGq7At/yRWr2wA36nbMUq8hFOdhIk4oQZiEMsShL:KFXh96F90Wf7nJPwdzWqL

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks