Overview

overview

10

Static

static

3

9df572615f...3N.exe

windows7-x64

10

9df572615f...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9df572615fc94f42c09518898dbc04f63a528496ad16acc26362e601d14b3663N

  • Size

    76KB

  • Sample

    240920-sljbfasgkg

  • MD5

    5a20e2daa11f9f3e3a91ac74c2fa8880

  • SHA1

    46ba772ec4e3084aaa80fc7065ff2dd93c82c698

  • SHA256

    9df572615fc94f42c09518898dbc04f63a528496ad16acc26362e601d14b3663

  • SHA512

    5fa47eabde3f6cc5a873cafd5f6573104b4fc339572301fc567a911f27c260fdac55fafd5b68a179a6a14ffc1a2b9b7bf28d981a07627dbf969457eba92ebb46

  • SSDEEP

    768:ROIrCiYGNP1YA+xOF4/i/BEYkp7P6lweQDhDmpU5GFrrEzWsdSE0d8pUHIkI0Iof:R7dNP1YLxO+2G40OIkaof

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      9df572615fc94f42c09518898dbc04f63a528496ad16acc26362e601d14b3663N

    • Size

      76KB

    • MD5

      5a20e2daa11f9f3e3a91ac74c2fa8880

    • SHA1

      46ba772ec4e3084aaa80fc7065ff2dd93c82c698

    • SHA256

      9df572615fc94f42c09518898dbc04f63a528496ad16acc26362e601d14b3663

    • SHA512

      5fa47eabde3f6cc5a873cafd5f6573104b4fc339572301fc567a911f27c260fdac55fafd5b68a179a6a14ffc1a2b9b7bf28d981a07627dbf969457eba92ebb46

    • SSDEEP

      768:ROIrCiYGNP1YA+xOF4/i/BEYkp7P6lweQDhDmpU5GFrrEzWsdSE0d8pUHIkI0Iof:R7dNP1YLxO+2G40OIkaof

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks