7b917a2ade9af8e4ae4a7367b6b5b7841414d21e93b623759f24e1f477dc5927 | Triage

Sharing

General

Target

7b917a2ade9af8e4ae4a7367b6b5b7841414d21e93b623759f24e1f477dc5927
Size

78KB
Sample

220919-pxnhradbdp
MD5

df1d0b496f7b78298a828a29a9fb9d95
SHA1

ba8a2033ab3bdbb2fe424e570162bddbb7b74188
SHA256

7b917a2ade9af8e4ae4a7367b6b5b7841414d21e93b623759f24e1f477dc5927
SHA512

8df8b103a4ac47e85d770f3d799c3cfd35bbb9eed60e790854e80e049d9ccde3a458b20ebec74a1854ee2a9ae5e80088976bf5c7287bea3e92f135aa1ee08f41
SSDEEP

1536:xYmm7CqlwmQDt64d9EnvqiMbCk0x6a6g:xYfqSvDiCfx6vg

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  7b917a2ade9af8e4ae4a7367b6b5b7841414d21e93b623759f24e1f477dc5927
- Size
  
  78KB
- MD5
  
  df1d0b496f7b78298a828a29a9fb9d95
- SHA1
  
  ba8a2033ab3bdbb2fe424e570162bddbb7b74188
- SHA256
  
  7b917a2ade9af8e4ae4a7367b6b5b7841414d21e93b623759f24e1f477dc5927
- SHA512
  
  8df8b103a4ac47e85d770f3d799c3cfd35bbb9eed60e790854e80e049d9ccde3a458b20ebec74a1854ee2a9ae5e80088976bf5c7287bea3e92f135aa1ee08f41
- SSDEEP
  
  1536:xYmm7CqlwmQDt64d9EnvqiMbCk0x6a6g:xYfqSvDiCfx6vg
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2