Overview

overview

10

Static

static

3

c3a2043fdf...0N.exe

windows7-x64

10

c3a2043fdf...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c3a2043fdfab084f1f4e3155f326e2fd3b38944943aeb81dcfb197ca4e522ae0N

  • Size

    75KB

  • Sample

    241014-xzpgts1hmb

  • MD5

    7bd4b531ebc7621fe9f88035f5ba16c0

  • SHA1

    a5644923800a7c07b8a02cbef4123fa01f13494b

  • SHA256

    c3a2043fdfab084f1f4e3155f326e2fd3b38944943aeb81dcfb197ca4e522ae0

  • SHA512

    9337507a85de1fc332247f5296bc1c754260f6fd5081566fba67ddc7e619028bbc2b0e8c542b67afda17f0ebd10b511e738987d1b3ac0695fdd2bdd0359d13bf

  • SSDEEP

    1536:bB+IvkfMlYPPEutHwHiHoHV/NBbgzrqNldFCnDNlN1t7g7:1+Iv/Gc/NBbgzrqNldFCnDNlN1G

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      c3a2043fdfab084f1f4e3155f326e2fd3b38944943aeb81dcfb197ca4e522ae0N

    • Size

      75KB

    • MD5

      7bd4b531ebc7621fe9f88035f5ba16c0

    • SHA1

      a5644923800a7c07b8a02cbef4123fa01f13494b

    • SHA256

      c3a2043fdfab084f1f4e3155f326e2fd3b38944943aeb81dcfb197ca4e522ae0

    • SHA512

      9337507a85de1fc332247f5296bc1c754260f6fd5081566fba67ddc7e619028bbc2b0e8c542b67afda17f0ebd10b511e738987d1b3ac0695fdd2bdd0359d13bf

    • SSDEEP

      1536:bB+IvkfMlYPPEutHwHiHoHV/NBbgzrqNldFCnDNlN1t7g7:1+Iv/Gc/NBbgzrqNldFCnDNlN1G

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks