e035120e306bff36a148c0358cbdf2f340389807441c9943e6d8e3607e2e7de7 | Triage

Sharing

General

Target

e035120e306bff36a148c0358cbdf2f340389807441c9943e6d8e3607e2e7de7
Size

141KB
Sample

221124-bfz9bsgh77
MD5

4afd266114ab51e9fa789bd361e30de0
SHA1

70e478e45704138b583ddad898a1ae019871d8f5
SHA256

e035120e306bff36a148c0358cbdf2f340389807441c9943e6d8e3607e2e7de7
SHA512

0fc0a6c7ee2a461f19ae8a9730d6297195c11790fc88a2aedc46c31220adc510be9d9301b454afb10bfdef0a055026a3d0003d68043aced9fc64f7f83b514bdc
SSDEEP

3072:Bz+92mhTMMJ/cPiq5bVin8/eqLjqxgnwp:Bz+92mhAMJ/cPl3i8/lKunwp

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  e035120e306bff36a148c0358cbdf2f340389807441c9943e6d8e3607e2e7de7
- Size
  
  141KB
- MD5
  
  4afd266114ab51e9fa789bd361e30de0
- SHA1
  
  70e478e45704138b583ddad898a1ae019871d8f5
- SHA256
  
  e035120e306bff36a148c0358cbdf2f340389807441c9943e6d8e3607e2e7de7
- SHA512
  
  0fc0a6c7ee2a461f19ae8a9730d6297195c11790fc88a2aedc46c31220adc510be9d9301b454afb10bfdef0a055026a3d0003d68043aced9fc64f7f83b514bdc
- SSDEEP
  
  3072:Bz+92mhTMMJ/cPiq5bVin8/eqLjqxgnwp:Bz+92mhAMJ/cPl3i8/lKunwp
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2