Overview

overview

10

Static

static

3

d58e48768e...0N.exe

windows7-x64

10

d58e48768e...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d58e48768ec8346bfb9055a15244fc70N

  • Size

    228KB

  • Sample

    240914-afv4yaxclg

  • MD5

    d58e48768ec8346bfb9055a15244fc70

  • SHA1

    20e24c57dd0ac68d1bf191e8c548bcb7b8592487

  • SHA256

    c10d54e3e88c2c91abb28c1bfa8e29ec329d125e265bde164d93c22ec08cf68a

  • SHA512

    7e2929f9d41626d2341267c5288b47d9c02e23f2a7e9fa406e6ff87bbac6acaf3ac2db25f7a6be8934b72673d852d80889c5e3eb8364f74bad5a37e2fce23802

  • SSDEEP

    6144:zrmt3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/aSb:Pm5PhAmZIH+aa

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      d58e48768ec8346bfb9055a15244fc70N

    • Size

      228KB

    • MD5

      d58e48768ec8346bfb9055a15244fc70

    • SHA1

      20e24c57dd0ac68d1bf191e8c548bcb7b8592487

    • SHA256

      c10d54e3e88c2c91abb28c1bfa8e29ec329d125e265bde164d93c22ec08cf68a

    • SHA512

      7e2929f9d41626d2341267c5288b47d9c02e23f2a7e9fa406e6ff87bbac6acaf3ac2db25f7a6be8934b72673d852d80889c5e3eb8364f74bad5a37e2fce23802

    • SSDEEP

      6144:zrmt3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/aSb:Pm5PhAmZIH+aa

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks