ab458511f84fa6e90196aa253b46a927a49512d57f6ab35535a612e609e80c87 | Triage

Sharing

General

Target

ab458511f84fa6e90196aa253b46a927a49512d57f6ab35535a612e609e80c87
Size

204KB
Sample

221011-lhjz8sgchp
MD5

123ca854a66c8fc2d1a416a91e4aa620
SHA1

2a349e8e99fc86b3ac4fec97aa65c8f425f879da
SHA256

ab458511f84fa6e90196aa253b46a927a49512d57f6ab35535a612e609e80c87
SHA512

ca0234bd5381c630d6257e37d52afff43401d8dbe265fffe0a37de7a9cd01dd4cd8bc2f75ce0fc48105e78e4be92774b79ca740e3c0e6c99ce541c90cae8f499
SSDEEP

1536:IU+OoSHo1vzxHwxWVJxNy3tQ9CW5EZWHakMwP9W6uXNh9h1AWa11GBPIdRONd+wd:BHo1/V50tQ9nLHbB9WTk9+JgqmlZ2N

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  ab458511f84fa6e90196aa253b46a927a49512d57f6ab35535a612e609e80c87
- Size
  
  204KB
- MD5
  
  123ca854a66c8fc2d1a416a91e4aa620
- SHA1
  
  2a349e8e99fc86b3ac4fec97aa65c8f425f879da
- SHA256
  
  ab458511f84fa6e90196aa253b46a927a49512d57f6ab35535a612e609e80c87
- SHA512
  
  ca0234bd5381c630d6257e37d52afff43401d8dbe265fffe0a37de7a9cd01dd4cd8bc2f75ce0fc48105e78e4be92774b79ca740e3c0e6c99ce541c90cae8f499
- SSDEEP
  
  1536:IU+OoSHo1vzxHwxWVJxNy3tQ9CW5EZWHakMwP9W6uXNh9h1AWa11GBPIdRONd+wd:BHo1/V50tQ9nLHbB9WTk9+JgqmlZ2N
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence