9ce892b232db33e6be093ad6fa2c10faeb62efd80dd6803d7b346220c58a771c | Triage

Sharing

General

Target

9ce892b232db33e6be093ad6fa2c10faeb62efd80dd6803d7b346220c58a771c
Size

120KB
Sample

221020-mjjxashefr
MD5

8147e77bcdd1733187e45f78abd00a87
SHA1

1adfa97a487007d345222d35579bba987af8865c
SHA256

9ce892b232db33e6be093ad6fa2c10faeb62efd80dd6803d7b346220c58a771c
SHA512

b6061495d0b101862f1858fb694a2bab0b283d4b696a19a0c319ab2bd4cc83bbdaf25b009021819b27a4b954d4544d9d9eb250709e5b45436864d30400363a58
SSDEEP

1536:XWFCF0feS6VUnKaXGE2Mtf9oUrUQKiQg9F5tkV7pjuX5e6wTeU/60hQHy4kt6U:MCketVXW2MtF3lV9qThay6U

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  9ce892b232db33e6be093ad6fa2c10faeb62efd80dd6803d7b346220c58a771c
- Size
  
  120KB
- MD5
  
  8147e77bcdd1733187e45f78abd00a87
- SHA1
  
  1adfa97a487007d345222d35579bba987af8865c
- SHA256
  
  9ce892b232db33e6be093ad6fa2c10faeb62efd80dd6803d7b346220c58a771c
- SHA512
  
  b6061495d0b101862f1858fb694a2bab0b283d4b696a19a0c319ab2bd4cc83bbdaf25b009021819b27a4b954d4544d9d9eb250709e5b45436864d30400363a58
- SSDEEP
  
  1536:XWFCF0feS6VUnKaXGE2Mtf9oUrUQKiQg9F5tkV7pjuX5e6wTeU/60hQHy4kt6U:MCketVXW2MtF3lV9qThay6U
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence