Overview

overview

10

Static

static

3

b123d88bd6...77.exe

windows7-x64

10

b123d88bd6...77.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b123d88bd636ca53779d70bb8a3fd7a26ba059665e73648a40fbfadd2e45a977

  • Size

    336KB

  • Sample

    241014-c73n7swfme

  • MD5

    2ba7266c7d40689060b5ce4e59afbc20

  • SHA1

    2f239ef274e04bf33f140f345a05fd5bb5f14518

  • SHA256

    b123d88bd636ca53779d70bb8a3fd7a26ba059665e73648a40fbfadd2e45a977

  • SHA512

    e6a503e5692bbbce11af65ecabdd059774e145cf7103b03fea7c2c0c24de9963cf7270492a654e147db1eaebfea7669dab0f7d0dc6d9f9ac3251111c62ca3f1f

  • SSDEEP

    3072:7pmGpBtQGCltUWrEpmpXzKmk4nDVkj4C2lXRWMvaTv/0qAdf564HQ4oQZiECRW:78GpYGCleWRpDC2dRITv/HAf5NUW5

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      b123d88bd636ca53779d70bb8a3fd7a26ba059665e73648a40fbfadd2e45a977

    • Size

      336KB

    • MD5

      2ba7266c7d40689060b5ce4e59afbc20

    • SHA1

      2f239ef274e04bf33f140f345a05fd5bb5f14518

    • SHA256

      b123d88bd636ca53779d70bb8a3fd7a26ba059665e73648a40fbfadd2e45a977

    • SHA512

      e6a503e5692bbbce11af65ecabdd059774e145cf7103b03fea7c2c0c24de9963cf7270492a654e147db1eaebfea7669dab0f7d0dc6d9f9ac3251111c62ca3f1f

    • SSDEEP

      3072:7pmGpBtQGCltUWrEpmpXzKmk4nDVkj4C2lXRWMvaTv/0qAdf564HQ4oQZiECRW:78GpYGCleWRpDC2dRITv/HAf5NUW5

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks