7e7b0ca02a0a601be5a08d04c09aa5b29d2e0e500a2ea9b431e15fa6dee540b3 | Triage

Sharing

General

Target

7e7b0ca02a0a601be5a08d04c09aa5b29d2e0e500a2ea9b431e15fa6dee540b3
Size

14KB
Sample

221031-bp7prsagdp
MD5

8247e2646dce669307da4b5356990820
SHA1

65d37e5a02b387876bda471ef3da9397ca2d8405
SHA256

7e7b0ca02a0a601be5a08d04c09aa5b29d2e0e500a2ea9b431e15fa6dee540b3
SHA512

3d5a7cebf2f5a974b3a86ca873035bbef9e3c359f319bc10b5be543dc22263e748cd32a45156f3138533a6c954b80330a564f150d9015ff4bd48e57ad09c4d86
SSDEEP

192:neJfRWCRM3Qzff42KU2C5spULmwQXd3z9EUmv/CUyYvQKqdjUW2fum58ajK6UiZR:0ogE4A2b2CCp3qjyYYKUCr5/DHcRG

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  7e7b0ca02a0a601be5a08d04c09aa5b29d2e0e500a2ea9b431e15fa6dee540b3
- Size
  
  14KB
- MD5
  
  8247e2646dce669307da4b5356990820
- SHA1
  
  65d37e5a02b387876bda471ef3da9397ca2d8405
- SHA256
  
  7e7b0ca02a0a601be5a08d04c09aa5b29d2e0e500a2ea9b431e15fa6dee540b3
- SHA512
  
  3d5a7cebf2f5a974b3a86ca873035bbef9e3c359f319bc10b5be543dc22263e748cd32a45156f3138533a6c954b80330a564f150d9015ff4bd48e57ad09c4d86
- SSDEEP
  
  192:neJfRWCRM3Qzff42KU2C5spULmwQXd3z9EUmv/CUyYvQKqdjUW2fum58ajK6UiZR:0ogE4A2b2CCp3qjyYYKUCr5/DHcRG
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2