6cc053774ea9595661c9c096235216f62a156c302fa3c542c7de3ceb3cbdb0f2 | Triage

Sharing

General

Target

6cc053774ea9595661c9c096235216f62a156c302fa3c542c7de3ceb3cbdb0f2
Size

108KB
Sample

221128-cf5dqabe8z
MD5

84e850b485b0423b21c0e6235209d4fc
SHA1

04a7c8ebc6d7f6e94799a593578d6ef0e0b78269
SHA256

6cc053774ea9595661c9c096235216f62a156c302fa3c542c7de3ceb3cbdb0f2
SHA512

b41f564346cccca4c96f20968eb150cd0176c899f8a641bef746e1850b9a7f73851144e49a72f61af514a6fb776d92a383ebb00d739cc080cabe002befef551b
SSDEEP

1536:L6q/KiB6oQ7Lh5+sXmNP0ttZPXLq0zTrk:2MmoIeZPUXTzTo

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  6cc053774ea9595661c9c096235216f62a156c302fa3c542c7de3ceb3cbdb0f2
- Size
  
  108KB
- MD5
  
  84e850b485b0423b21c0e6235209d4fc
- SHA1
  
  04a7c8ebc6d7f6e94799a593578d6ef0e0b78269
- SHA256
  
  6cc053774ea9595661c9c096235216f62a156c302fa3c542c7de3ceb3cbdb0f2
- SHA512
  
  b41f564346cccca4c96f20968eb150cd0176c899f8a641bef746e1850b9a7f73851144e49a72f61af514a6fb776d92a383ebb00d739cc080cabe002befef551b
- SSDEEP
  
  1536:L6q/KiB6oQ7Lh5+sXmNP0ttZPXLq0zTrk:2MmoIeZPUXTzTo
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence