General

  • Target

    227ad5a386d2e09e2d24d5bde2025eca7d2eaa232540da3a26829149aeb82ce5

  • Size

    260KB

  • Sample

    221003-dj8qzsddd3

  • MD5

    4c3562c2a374248c5911903389304a30

  • SHA1

    e0c6d539c710a2e74d0838877008db83a6b82884

  • SHA256

    227ad5a386d2e09e2d24d5bde2025eca7d2eaa232540da3a26829149aeb82ce5

  • SHA512

    7f4297e4c1ae339ff7d4b86a5caf135248a0754c03e48c13e35164e030f8839718ebf859bb434f9963e930a1674bcb58baf76b0ebc99092c1c13378b46f38008

  • SSDEEP

    6144:WdbtGgTSrMaIl/jcLijfHFEHWzXvjT85R:WrTSrMaIqLlI/H85R

Score
10/10

Malware Config

Targets

    • Target

      227ad5a386d2e09e2d24d5bde2025eca7d2eaa232540da3a26829149aeb82ce5

    • Size

      260KB

    • MD5

      4c3562c2a374248c5911903389304a30

    • SHA1

      e0c6d539c710a2e74d0838877008db83a6b82884

    • SHA256

      227ad5a386d2e09e2d24d5bde2025eca7d2eaa232540da3a26829149aeb82ce5

    • SHA512

      7f4297e4c1ae339ff7d4b86a5caf135248a0754c03e48c13e35164e030f8839718ebf859bb434f9963e930a1674bcb58baf76b0ebc99092c1c13378b46f38008

    • SSDEEP

      6144:WdbtGgTSrMaIl/jcLijfHFEHWzXvjT85R:WrTSrMaIqLlI/H85R

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Hidden Files and Directories

1
T1158

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Hidden Files and Directories

1
T1158

Modify Registry

2
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks