242637ded0dcaa3085a7e866bc94c2377d4670dbd96b5add5b707216ae4366d1 | Triage

Sharing

General

Target

242637ded0dcaa3085a7e866bc94c2377d4670dbd96b5add5b707216ae4366d1
Size

385KB
Sample

221125-j32pnsgd91
MD5

ff20e3f508980947e98ff072e0448c8a
SHA1

d26ec6021e5667f58adf5fbfbd781d78f7e4dcb4
SHA256

242637ded0dcaa3085a7e866bc94c2377d4670dbd96b5add5b707216ae4366d1
SHA512

a530b583c57008b3e4ee7e12295eccd065ea81c7d1ecc52361a6c7230e68f727cdacdee34d47b4914834445f27066f9a69be00d1d0af09ce13090f65680516ff
SSDEEP

6144:dLbCRkz3xBb+XflYP4ZJhjaYYXDMBL3cN8a0SF1TCqzMZ+L:FIg3zqlYPsJhjEMBLm8AdQY

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  242637ded0dcaa3085a7e866bc94c2377d4670dbd96b5add5b707216ae4366d1
- Size
  
  385KB
- MD5
  
  ff20e3f508980947e98ff072e0448c8a
- SHA1
  
  d26ec6021e5667f58adf5fbfbd781d78f7e4dcb4
- SHA256
  
  242637ded0dcaa3085a7e866bc94c2377d4670dbd96b5add5b707216ae4366d1
- SHA512
  
  a530b583c57008b3e4ee7e12295eccd065ea81c7d1ecc52361a6c7230e68f727cdacdee34d47b4914834445f27066f9a69be00d1d0af09ce13090f65680516ff
- SSDEEP
  
  6144:dLbCRkz3xBb+XflYP4ZJhjaYYXDMBL3cN8a0SF1TCqzMZ+L:FIg3zqlYPsJhjEMBLm8AdQY
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2