Overview

overview

10

Static

static

3

eef06d4d53...bN.exe

windows7-x64

10

eef06d4d53...bN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eef06d4d535f3f82fd75839ee782af64f9b2f5bb04cf4999df9b642d979be9fbN.exe

  • Size

    96KB

  • Sample

    240926-ag12kswalq

  • MD5

    d86057092bc44f69442ef306916992a0

  • SHA1

    fbac0befdc8a074b96a00991b7c9e4b2f2ef1b21

  • SHA256

    eef06d4d535f3f82fd75839ee782af64f9b2f5bb04cf4999df9b642d979be9fb

  • SHA512

    55151b7ec1c26a35e622c449653853c17b5fe56d94f094878d3322d3d393caf1b9bb60ebddc2088728d654da2fa10eaecb34c7092bcce1d9f1149be1a4f9db5f

  • SSDEEP

    1536:/TBBGNgzWwmhLmncdkadGVScGYJXeiyCnO+TI4K4I4i404R4Z1VcvsJOpPpMm4/O:NBGuW6cOadGRJuH7ut/Tdvd+hXV/vU3r

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      eef06d4d535f3f82fd75839ee782af64f9b2f5bb04cf4999df9b642d979be9fbN.exe

    • Size

      96KB

    • MD5

      d86057092bc44f69442ef306916992a0

    • SHA1

      fbac0befdc8a074b96a00991b7c9e4b2f2ef1b21

    • SHA256

      eef06d4d535f3f82fd75839ee782af64f9b2f5bb04cf4999df9b642d979be9fb

    • SHA512

      55151b7ec1c26a35e622c449653853c17b5fe56d94f094878d3322d3d393caf1b9bb60ebddc2088728d654da2fa10eaecb34c7092bcce1d9f1149be1a4f9db5f

    • SSDEEP

      1536:/TBBGNgzWwmhLmncdkadGVScGYJXeiyCnO+TI4K4I4i404R4Z1VcvsJOpPpMm4/O:NBGuW6cOadGRJuH7ut/Tdvd+hXV/vU3r

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks