Overview

overview

10

Static

static

3

ea10cf0570...0N.exe

windows7-x64

10

ea10cf0570...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ea10cf0570f0f5974538da2313dd04e0N

  • Size

    77KB

  • Sample

    240914-fr3k2sycnc

  • MD5

    ea10cf0570f0f5974538da2313dd04e0

  • SHA1

    950bf8511951dfd11863724d30068fa2d628bd33

  • SHA256

    433f75805b5465b0abd0ca03c2703d0b8fc1b0da7e64c82f48512b45097b3e33

  • SHA512

    2e6165befb91864903ef57f51e35f7d4ec7a678ab1509edecd39727d3deab3635fcdb53f19bbf27d802000b9a67e2bef7be6e54c4b664e40d81d1cd6b2039f7a

  • SSDEEP

    1536:0kLkEc0/i15Bx8pEttgdO/mXpgWXOJgQmmogDcMH5fCVsJVafuegWXAi+oX9tWVS:doEc0/i15Bx8pEttgdO/mXpgWXOJgQm/

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ea10cf0570f0f5974538da2313dd04e0N

    • Size

      77KB

    • MD5

      ea10cf0570f0f5974538da2313dd04e0

    • SHA1

      950bf8511951dfd11863724d30068fa2d628bd33

    • SHA256

      433f75805b5465b0abd0ca03c2703d0b8fc1b0da7e64c82f48512b45097b3e33

    • SHA512

      2e6165befb91864903ef57f51e35f7d4ec7a678ab1509edecd39727d3deab3635fcdb53f19bbf27d802000b9a67e2bef7be6e54c4b664e40d81d1cd6b2039f7a

    • SSDEEP

      1536:0kLkEc0/i15Bx8pEttgdO/mXpgWXOJgQmmogDcMH5fCVsJVafuegWXAi+oX9tWVS:doEc0/i15Bx8pEttgdO/mXpgWXOJgQm/

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks