9db69b7b135fa02bbeb0cb514eb929a389aeef3eedb4bd15d13c8a9108b6a03e | Triage

Sharing

General

Target

9db69b7b135fa02bbeb0cb514eb929a389aeef3eedb4bd15d13c8a9108b6a03e
Size

432KB
Sample

221012-sdde8agean
MD5

6ca1fae204eab34cb297f7e83df6fdbf
SHA1

9bdd963743a2b45347301efd157423f9ec7680df
SHA256

9db69b7b135fa02bbeb0cb514eb929a389aeef3eedb4bd15d13c8a9108b6a03e
SHA512

745f05bc79be67a0f3820c2b30133a72a5a21f5703915035d449e349e44eec9ac6ab2be4d592b3aff6c082c699d1de9ee82f4da31e036a1b97b25328822c397e
SSDEEP

6144:t1VZfBdIgi71nAv/szQIzf4Zj3JVyN/Y53fZ6ZsVb75:rVLdInSssIWjPy9Y53B6A75

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  9db69b7b135fa02bbeb0cb514eb929a389aeef3eedb4bd15d13c8a9108b6a03e
- Size
  
  432KB
- MD5
  
  6ca1fae204eab34cb297f7e83df6fdbf
- SHA1
  
  9bdd963743a2b45347301efd157423f9ec7680df
- SHA256
  
  9db69b7b135fa02bbeb0cb514eb929a389aeef3eedb4bd15d13c8a9108b6a03e
- SHA512
  
  745f05bc79be67a0f3820c2b30133a72a5a21f5703915035d449e349e44eec9ac6ab2be4d592b3aff6c082c699d1de9ee82f4da31e036a1b97b25328822c397e
- SSDEEP
  
  6144:t1VZfBdIgi71nAv/szQIzf4Zj3JVyN/Y53fZ6ZsVb75:rVLdInSssIWjPy9Y53B6A75
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence