ccbf9ba22caf4ae898f1f5196cdc48b8c31197d3af229a570060acca6a2d6968 | Triage

Sharing

General

Target

ccbf9ba22caf4ae898f1f5196cdc48b8c31197d3af229a570060acca6a2d6968
Size

124KB
Sample

221030-ap8rdseaen
MD5

a2959722c47e4416997e2a44efbceef0
SHA1

836fb887a9ca5f2829e0061eddd486d39d5dbd75
SHA256

ccbf9ba22caf4ae898f1f5196cdc48b8c31197d3af229a570060acca6a2d6968
SHA512

fdab05fe6b57e2f172f350e0011466c7d87bdd2025b6f875d3a6ea6f18ea7b0e2cb11aa641e0f07b68890062b9e4ede4582f7bb18c9bed20332fa8a651949437
SSDEEP

1536:Prszx5Ya/hRO/N69BH3OoGa+FLHjKceRgrkOSoINeGUmE:DG/YkhkFoN3Oo1+FvfSW

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  ccbf9ba22caf4ae898f1f5196cdc48b8c31197d3af229a570060acca6a2d6968
- Size
  
  124KB
- MD5
  
  a2959722c47e4416997e2a44efbceef0
- SHA1
  
  836fb887a9ca5f2829e0061eddd486d39d5dbd75
- SHA256
  
  ccbf9ba22caf4ae898f1f5196cdc48b8c31197d3af229a570060acca6a2d6968
- SHA512
  
  fdab05fe6b57e2f172f350e0011466c7d87bdd2025b6f875d3a6ea6f18ea7b0e2cb11aa641e0f07b68890062b9e4ede4582f7bb18c9bed20332fa8a651949437
- SSDEEP
  
  1536:Prszx5Ya/hRO/N69BH3OoGa+FLHjKceRgrkOSoINeGUmE:DG/YkhkFoN3Oo1+FvfSW
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence