bd319de75589a7562d766884a7636eb4876594a9c4b1160260fc71764bcf816c | Triage

Sharing

General

Target

bd319de75589a7562d766884a7636eb4876594a9c4b1160260fc71764bcf816c
Size

96KB
Sample

221124-agsefahf6t
MD5

3666e16b0ee6b200988f788e62f34520
SHA1

fe90bd5cc0a944ec24064c209cc8c269635b7740
SHA256

bd319de75589a7562d766884a7636eb4876594a9c4b1160260fc71764bcf816c
SHA512

f260506163af90ceaa02ead2b2d32aa0e1f82dcdc5b2936ff357a381ec74f25502badf76fb46678819751ca67129bdb615b637a08136cd47e659f2f7490be555
SSDEEP

1536:FsPw+co7m6IdGW3KuXDNSj6JcJ8NjhfFj2PztDPv3XAiS:a4nOwGUKArNj2D4iS

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  bd319de75589a7562d766884a7636eb4876594a9c4b1160260fc71764bcf816c
- Size
  
  96KB
- MD5
  
  3666e16b0ee6b200988f788e62f34520
- SHA1
  
  fe90bd5cc0a944ec24064c209cc8c269635b7740
- SHA256
  
  bd319de75589a7562d766884a7636eb4876594a9c4b1160260fc71764bcf816c
- SHA512
  
  f260506163af90ceaa02ead2b2d32aa0e1f82dcdc5b2936ff357a381ec74f25502badf76fb46678819751ca67129bdb615b637a08136cd47e659f2f7490be555
- SSDEEP
  
  1536:FsPw+co7m6IdGW3KuXDNSj6JcJ8NjhfFj2PztDPv3XAiS:a4nOwGUKArNj2D4iS
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence