77edb695090a985a0d6e3c639047c20891f2e0d3c5d47263eb480cceff5a01e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77edb695090a985a0d6e3c639047c20891f2e0d3c5d47263eb480cceff5a01e6
Size

51KB
Sample

220919-jj4d6aeeg3
MD5

c241d6928d96087a63d9ef2c7ca144b7
SHA1

5c9c3fc6ff356c5edc4800a4eb9b76556eb4846d
SHA256

77edb695090a985a0d6e3c639047c20891f2e0d3c5d47263eb480cceff5a01e6
SHA512

59adac410c4edc64d16947b199bcbd24b1dc9df1817e613fa577ed8072d9ea9b95d7fb964e58b6c0cb8487f7cf4c4905dd9cbe9b4bd202e8c8a97192bb1d85ba
SSDEEP

768:g9J8NowRheD8/3rJiUqyet8w9abyzS5E50kyoVonvnRiZljBwiwo5sW3yhz7v763:g9wvQUreUbyzsB+2myhzT7hOhdhEF6

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  77edb695090a985a0d6e3c639047c20891f2e0d3c5d47263eb480cceff5a01e6
- Size
  
  51KB
- MD5
  
  c241d6928d96087a63d9ef2c7ca144b7
- SHA1
  
  5c9c3fc6ff356c5edc4800a4eb9b76556eb4846d
- SHA256
  
  77edb695090a985a0d6e3c639047c20891f2e0d3c5d47263eb480cceff5a01e6
- SHA512
  
  59adac410c4edc64d16947b199bcbd24b1dc9df1817e613fa577ed8072d9ea9b95d7fb964e58b6c0cb8487f7cf4c4905dd9cbe9b4bd202e8c8a97192bb1d85ba
- SSDEEP
  
  768:g9J8NowRheD8/3rJiUqyet8w9abyzS5E50kyoVonvnRiZljBwiwo5sW3yhz7v763:g9wvQUreUbyzsB+2myhzT7hOhdhEF6
Score

8^/10

persistence
- Drops file in Drivers directory
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2