772a93047136f4d3d714cd1ad7400957f5411a8cbfbc51380dd8339129d0e94d | Triage

Sharing

General

Target

772a93047136f4d3d714cd1ad7400957f5411a8cbfbc51380dd8339129d0e94d
Size

40KB
Sample

221123-zqtrasde72
MD5

7a22bbfd531b77e796eb1459d41cd806
SHA1

28819871c8ced277329f462f2283d5367548a907
SHA256

772a93047136f4d3d714cd1ad7400957f5411a8cbfbc51380dd8339129d0e94d
SHA512

418777d2702d0f69c857013659b3303a1cd7bea94cf03979c61e7fc7082427b9f3e11767f46f7a87ab1c87226dba29f4ea3ef7f17c2bba5f5c9f883df429a248
SSDEEP

768:BVmfIz1X61wO2J6OpY9x0dHXOHk3CCecGH9C/vc:B1z8wO2J6IY9x6w4RCsvc

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  772a93047136f4d3d714cd1ad7400957f5411a8cbfbc51380dd8339129d0e94d
- Size
  
  40KB
- MD5
  
  7a22bbfd531b77e796eb1459d41cd806
- SHA1
  
  28819871c8ced277329f462f2283d5367548a907
- SHA256
  
  772a93047136f4d3d714cd1ad7400957f5411a8cbfbc51380dd8339129d0e94d
- SHA512
  
  418777d2702d0f69c857013659b3303a1cd7bea94cf03979c61e7fc7082427b9f3e11767f46f7a87ab1c87226dba29f4ea3ef7f17c2bba5f5c9f883df429a248
- SSDEEP
  
  768:BVmfIz1X61wO2J6OpY9x0dHXOHk3CCecGH9C/vc:B1z8wO2J6IY9x6w4RCsvc
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence