7bf6adbb8b951fd2137938ceb752d14be2b6d3db57abb390be7e730dd642c4a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7bf6adbb8b951fd2137938ceb752d14be2b6d3db57abb390be7e730dd642c4a6
Size

124KB
Sample

221003-dttptadgh4
MD5

62d6773471c9b09045042b22d38da2f0
SHA1

71e39af932f6f6f14be2c14254e0cff24351cba4
SHA256

7bf6adbb8b951fd2137938ceb752d14be2b6d3db57abb390be7e730dd642c4a6
SHA512

e9a2d89ca86d31cd0be6fa4fa810c3ab952640328cea3bee083ce6632b3a30f8c197f01053b872cc2bffcfc337f41a7f791f9474ea509b6b08b4ba9e6cd0e049
SSDEEP

1536:hAsz/5YlDUhRO/N69BH3OoGa+FLHjKKvRgrkOSodPNeG0h/y:KGBYehkFoN3Oo1+FvkScIq

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  7bf6adbb8b951fd2137938ceb752d14be2b6d3db57abb390be7e730dd642c4a6
- Size
  
  124KB
- MD5
  
  62d6773471c9b09045042b22d38da2f0
- SHA1
  
  71e39af932f6f6f14be2c14254e0cff24351cba4
- SHA256
  
  7bf6adbb8b951fd2137938ceb752d14be2b6d3db57abb390be7e730dd642c4a6
- SHA512
  
  e9a2d89ca86d31cd0be6fa4fa810c3ab952640328cea3bee083ce6632b3a30f8c197f01053b872cc2bffcfc337f41a7f791f9474ea509b6b08b4ba9e6cd0e049
- SSDEEP
  
  1536:hAsz/5YlDUhRO/N69BH3OoGa+FLHjKKvRgrkOSodPNeG0h/y:KGBYehkFoN3Oo1+FvkScIq
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence