Overview

overview

10

Static

static

3

733e2d7820...8N.exe

windows7-x64

10

733e2d7820...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    733e2d78201fbdbd6a96e31a5091418a7797419d77d4ccf42063cf7813d9bde8N

  • Size

    96KB

  • Sample

    240919-hcksssvfrc

  • MD5

    44e87dbff5f33d45f1ba266674a13c60

  • SHA1

    3fce5c5af1f3c655a5488929cc762c105be87082

  • SHA256

    733e2d78201fbdbd6a96e31a5091418a7797419d77d4ccf42063cf7813d9bde8

  • SHA512

    66bbb7df9ef26c301297017f4499326aaf55bdbac2ff3fd24205815a17534b6a2130216e957428230476c65ec92c3695db8812611a89f15f4daacfd522eb4afb

  • SSDEEP

    1536:f7UEg52O9tyVQO8P8ych6Vwjj3RJNEo/knRzdnynE7RldNEP8lijOe/NIjP:f4E/OelychlzR3Ek65Rldq/CP

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      733e2d78201fbdbd6a96e31a5091418a7797419d77d4ccf42063cf7813d9bde8N

    • Size

      96KB

    • MD5

      44e87dbff5f33d45f1ba266674a13c60

    • SHA1

      3fce5c5af1f3c655a5488929cc762c105be87082

    • SHA256

      733e2d78201fbdbd6a96e31a5091418a7797419d77d4ccf42063cf7813d9bde8

    • SHA512

      66bbb7df9ef26c301297017f4499326aaf55bdbac2ff3fd24205815a17534b6a2130216e957428230476c65ec92c3695db8812611a89f15f4daacfd522eb4afb

    • SSDEEP

      1536:f7UEg52O9tyVQO8P8ych6Vwjj3RJNEo/knRzdnynE7RldNEP8lijOe/NIjP:f4E/OelychlzR3Ek65Rldq/CP

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks