d7954605b3c45291c2a89162a4dd071f40355935d8666085d144607fa8dad6d8 | Triage

Sharing

General

Target

d7954605b3c45291c2a89162a4dd071f40355935d8666085d144607fa8dad6d8
Size

55KB
Sample

221021-egaa3sahcq
MD5

5164d2781974b394dd321fe1a26f0cdd
SHA1

b8562135d78b0f09e7209d527d3e0c25327b6937
SHA256

d7954605b3c45291c2a89162a4dd071f40355935d8666085d144607fa8dad6d8
SHA512

85f93fbbb02814ab7fd437f4f707405c05987d08f5f5071481d1aeba61a8f4247b20456d5e72a80f61b01f07a620f76693abdc08bd7afa242a472dccdbe2d0c2
SSDEEP

768:Oe3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJapg4RoSMZeUZB/QosWpH+DrCUpfT:V3cpyORJLuB4P4AJJv4Romu/9tpvUZD

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  d7954605b3c45291c2a89162a4dd071f40355935d8666085d144607fa8dad6d8
- Size
  
  55KB
- MD5
  
  5164d2781974b394dd321fe1a26f0cdd
- SHA1
  
  b8562135d78b0f09e7209d527d3e0c25327b6937
- SHA256
  
  d7954605b3c45291c2a89162a4dd071f40355935d8666085d144607fa8dad6d8
- SHA512
  
  85f93fbbb02814ab7fd437f4f707405c05987d08f5f5071481d1aeba61a8f4247b20456d5e72a80f61b01f07a620f76693abdc08bd7afa242a472dccdbe2d0c2
- SSDEEP
  
  768:Oe3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJapg4RoSMZeUZB/QosWpH+DrCUpfT:V3cpyORJLuB4P4AJJv4Romu/9tpvUZD
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2