Overview

overview

10

Static

static

5

bffc35e762...ac.exe

windows7-x64

10

bffc35e762...ac.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bffc35e7620db3970580d35331f6fd9a8389b56b14a783db58eda13a755e53ac.exe

  • Size

    204KB

  • Sample

    241123-ksmcnssjhy

  • MD5

    0ac4edfbeaba0f502662782e754cd132

  • SHA1

    661cac1f7496debc8b6caa9fdad81355a53471a5

  • SHA256

    bffc35e7620db3970580d35331f6fd9a8389b56b14a783db58eda13a755e53ac

  • SHA512

    adadf04554127edad2bb4876f8bd7a35d10668d4eba41460bb194494bda5cff1496bcb086a0f18cc97650f9b5a8e16acbcc58d94075fe03629ae04dd164f3bbe

  • SSDEEP

    768:LlvMareJ+teVEwbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14PGBEw:LRl6J+8jlGVs4emEFb3P0lpX

Score
10/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      bffc35e7620db3970580d35331f6fd9a8389b56b14a783db58eda13a755e53ac.exe

    • Size

      204KB

    • MD5

      0ac4edfbeaba0f502662782e754cd132

    • SHA1

      661cac1f7496debc8b6caa9fdad81355a53471a5

    • SHA256

      bffc35e7620db3970580d35331f6fd9a8389b56b14a783db58eda13a755e53ac

    • SHA512

      adadf04554127edad2bb4876f8bd7a35d10668d4eba41460bb194494bda5cff1496bcb086a0f18cc97650f9b5a8e16acbcc58d94075fe03629ae04dd164f3bbe

    • SSDEEP

      768:LlvMareJ+teVEwbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14PGBEw:LRl6J+8jlGVs4emEFb3P0lpX

    Score
    10/10
    discoveryevasionpersistenceupx

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks