7e929822e664d6707757c86eb0ab5ebec2ac0b958068023776e2f6957e6d9daf | Triage

Sharing

General

Target

7e929822e664d6707757c86eb0ab5ebec2ac0b958068023776e2f6957e6d9daf
Size

288KB
Sample

221020-ccapyahed9
MD5

55da63c8fc8a9e6e3b43381fe4f00260
SHA1

cc120a72c5461b624d6032ed139f75e17f52c16e
SHA256

7e929822e664d6707757c86eb0ab5ebec2ac0b958068023776e2f6957e6d9daf
SHA512

1b82d8c950c397829d3bc3edad39bedc0f6c4cecaf7ae0a30a7007274ff6b4835083afbf6f458d4f179cca09ff502c26787d9469c0aaea3d56fa285e00666cda
SSDEEP

6144:4zivAN+tytpx96Hg02BCh3FZuhbYaxUG2nIVeUutm:4zivfyDxsHg02BCh3FZuhbYaxUG2npUx

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  7e929822e664d6707757c86eb0ab5ebec2ac0b958068023776e2f6957e6d9daf
- Size
  
  288KB
- MD5
  
  55da63c8fc8a9e6e3b43381fe4f00260
- SHA1
  
  cc120a72c5461b624d6032ed139f75e17f52c16e
- SHA256
  
  7e929822e664d6707757c86eb0ab5ebec2ac0b958068023776e2f6957e6d9daf
- SHA512
  
  1b82d8c950c397829d3bc3edad39bedc0f6c4cecaf7ae0a30a7007274ff6b4835083afbf6f458d4f179cca09ff502c26787d9469c0aaea3d56fa285e00666cda
- SSDEEP
  
  6144:4zivAN+tytpx96Hg02BCh3FZuhbYaxUG2nIVeUutm:4zivfyDxsHg02BCh3FZuhbYaxUG2npUx
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence