750fd1671e36d9754054db3b5307f0907eaec5a60046a23eb6480a4dbe020fc7 | Triage

Sharing

General

Target

750fd1671e36d9754054db3b5307f0907eaec5a60046a23eb6480a4dbe020fc7
Size

212KB
Sample

221011-zbwbksdca6
MD5

77642b73a42be890626bd16dcbada3c9
SHA1

88b660071947a4d3e929b40dc0b2e8af78e7ab30
SHA256

750fd1671e36d9754054db3b5307f0907eaec5a60046a23eb6480a4dbe020fc7
SHA512

f86347944b406a62f0d98be19478337cb6bcf5a63055b426728d7c4b409e0ed8e0ea86e759351e4a646361f138c3b976563a0f7e59c168360a2262b5bf8530ec
SSDEEP

6144:37AQlUWF/B/XQSA5g9+plxVSzfuDkZHxpZgyagnZYsHmv+3sH3OU5GGE9EsWR1sZ:kQHEgnZYsGA

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  750fd1671e36d9754054db3b5307f0907eaec5a60046a23eb6480a4dbe020fc7
- Size
  
  212KB
- MD5
  
  77642b73a42be890626bd16dcbada3c9
- SHA1
  
  88b660071947a4d3e929b40dc0b2e8af78e7ab30
- SHA256
  
  750fd1671e36d9754054db3b5307f0907eaec5a60046a23eb6480a4dbe020fc7
- SHA512
  
  f86347944b406a62f0d98be19478337cb6bcf5a63055b426728d7c4b409e0ed8e0ea86e759351e4a646361f138c3b976563a0f7e59c168360a2262b5bf8530ec
- SSDEEP
  
  6144:37AQlUWF/B/XQSA5g9+plxVSzfuDkZHxpZgyagnZYsHmv+3sH3OU5GGE9EsWR1sZ:kQHEgnZYsGA
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence