e8e3523d545a57b0488ec0113116945c3e15e53f2fbdba5e5ef774a93bb2e765 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8e3523d545a57b0488ec0113116945c3e15e53f2fbdba5e5ef774a93bb2e765
Size

132KB
Sample

221029-tspx8sefdq
MD5

83c5f8319b78f3e0c686ae513d17b060
SHA1

03964320ab8d7618669f405e504e66dc941ca77e
SHA256

e8e3523d545a57b0488ec0113116945c3e15e53f2fbdba5e5ef774a93bb2e765
SHA512

690355da1c5d93207bc1cd8118e0e5879a109077a04a57872d078bab1e1b8be344c5a03b0acc9ff5d4fc950bc5538744a1a18e3b07dfab52d5be8a2324fcb00b
SSDEEP

3072:deDskqy7TBJVSgpS5uIyio/Conuh1CNvD0irOz:diqoTB2grko/C2gcQire

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  e8e3523d545a57b0488ec0113116945c3e15e53f2fbdba5e5ef774a93bb2e765
- Size
  
  132KB
- MD5
  
  83c5f8319b78f3e0c686ae513d17b060
- SHA1
  
  03964320ab8d7618669f405e504e66dc941ca77e
- SHA256
  
  e8e3523d545a57b0488ec0113116945c3e15e53f2fbdba5e5ef774a93bb2e765
- SHA512
  
  690355da1c5d93207bc1cd8118e0e5879a109077a04a57872d078bab1e1b8be344c5a03b0acc9ff5d4fc950bc5538744a1a18e3b07dfab52d5be8a2324fcb00b
- SSDEEP
  
  3072:deDskqy7TBJVSgpS5uIyio/Conuh1CNvD0irOz:diqoTB2grko/C2gcQire
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence