Overview

overview

7

Static

static

3

7c69f0759b...5N.exe

windows7-x64

7c69f0759b...5N.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    7c69f0759bcf2036ad232aded132ead05014e10782131984ef88e1fc7b72f295N

  • Size

    61KB

  • Sample

    240930-wys8ysshjh

  • MD5

    f7ba515fc4c2b04dec3c5d3e6a6fcc00

  • SHA1

    65e9b349f1153946ef57e3a6206dac5b1e1a0172

  • SHA256

    7c69f0759bcf2036ad232aded132ead05014e10782131984ef88e1fc7b72f295

  • SHA512

    f3d0850f46a6df62548ca0a377cbc8e8b12aac5b5309b5b92d1b7a14035bef2d04ae7d0886667871d42f4e2f6d393d3d8f5ac2464bd3e28ba5120c6b0610242c

  • SSDEEP

    1536:Ph+voyCuKEKg5ZphuCaKxbHxIOcAVDwcj:Phb2PzaKxbRdDj

Score
7/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      7c69f0759bcf2036ad232aded132ead05014e10782131984ef88e1fc7b72f295N

    • Size

      61KB

    • MD5

      f7ba515fc4c2b04dec3c5d3e6a6fcc00

    • SHA1

      65e9b349f1153946ef57e3a6206dac5b1e1a0172

    • SHA256

      7c69f0759bcf2036ad232aded132ead05014e10782131984ef88e1fc7b72f295

    • SHA512

      f3d0850f46a6df62548ca0a377cbc8e8b12aac5b5309b5b92d1b7a14035bef2d04ae7d0886667871d42f4e2f6d393d3d8f5ac2464bd3e28ba5120c6b0610242c

    • SSDEEP

      1536:Ph+voyCuKEKg5ZphuCaKxbHxIOcAVDwcj:Phb2PzaKxbRdDj

    Score
    7/10
    defense_evasiondiscoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks