751609f7e6b651aba656ec190f5ebd00bcf5f23179ae3124c26d9460f4c0574c | Triage

Sharing

General

Target

751609f7e6b651aba656ec190f5ebd00bcf5f23179ae3124c26d9460f4c0574c
Size

60KB
Sample

221124-aszynaae2w
MD5

360d89d5aa19c242f346d939962cb590
SHA1

b5cd4284f8edbd39c88b7e587181cab6a0924261
SHA256

751609f7e6b651aba656ec190f5ebd00bcf5f23179ae3124c26d9460f4c0574c
SHA512

f7ad21fa811aa1471e17b6b90040556983b729373796e5a3879580e3facc074a23ed05f06ba1badd7e8e7c2f9cb346a7c415ca9d9095fb07849faef977a09e74
SSDEEP

768:k6qTD9xRIHgWTU6xUdPMXndo7sZUNMRrY20KtF1eNbw1o+pdok4I:h2DL6mJdsndo6UNMyetF1qw1o+pdSI

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  751609f7e6b651aba656ec190f5ebd00bcf5f23179ae3124c26d9460f4c0574c
- Size
  
  60KB
- MD5
  
  360d89d5aa19c242f346d939962cb590
- SHA1
  
  b5cd4284f8edbd39c88b7e587181cab6a0924261
- SHA256
  
  751609f7e6b651aba656ec190f5ebd00bcf5f23179ae3124c26d9460f4c0574c
- SHA512
  
  f7ad21fa811aa1471e17b6b90040556983b729373796e5a3879580e3facc074a23ed05f06ba1badd7e8e7c2f9cb346a7c415ca9d9095fb07849faef977a09e74
- SSDEEP
  
  768:k6qTD9xRIHgWTU6xUdPMXndo7sZUNMRrY20KtF1eNbw1o+pdok4I:h2DL6mJdsndo6UNMyetF1qw1o+pdSI
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence