e665a31f7658cac8e16dfce45caa19c22d3b0c3863de47fe51519810d0a8a8a2 | Triage

Sharing

General

Target

e665a31f7658cac8e16dfce45caa19c22d3b0c3863de47fe51519810d0a8a8a2
Size

86KB
Sample

221121-vxyxdaed6z
MD5

3b23c84d0d6655273e72f62bd0f44a20
SHA1

de4a9077efe13bf6484a64a53bccd9efc6f84468
SHA256

e665a31f7658cac8e16dfce45caa19c22d3b0c3863de47fe51519810d0a8a8a2
SHA512

635fd6288fdca680001bf3953fabcd5acbff027c1c5dd1fe70519ca3eac2542ad4edc843066bfeff4b5bba727f293350a785bfc3bc399c7ccf9a4ca5955be7f6
SSDEEP

1536:F/E/8FZkgT1tnSe+L6ZtTqI1Rfkq4b/Z0vdWb1:FckDkgTrSBCt71RfkqE7b

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  e665a31f7658cac8e16dfce45caa19c22d3b0c3863de47fe51519810d0a8a8a2
- Size
  
  86KB
- MD5
  
  3b23c84d0d6655273e72f62bd0f44a20
- SHA1
  
  de4a9077efe13bf6484a64a53bccd9efc6f84468
- SHA256
  
  e665a31f7658cac8e16dfce45caa19c22d3b0c3863de47fe51519810d0a8a8a2
- SHA512
  
  635fd6288fdca680001bf3953fabcd5acbff027c1c5dd1fe70519ca3eac2542ad4edc843066bfeff4b5bba727f293350a785bfc3bc399c7ccf9a4ca5955be7f6
- SSDEEP
  
  1536:F/E/8FZkgT1tnSe+L6ZtTqI1Rfkq4b/Z0vdWb1:FckDkgTrSBCt71RfkqE7b
Score

10^/10

evasion
- Modifies firewall policy service
  evasion
- Drops file in Drivers directory
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2