beba31281b7dc94003794887dec8807b1219b978072f6b11aa7cc2266cd10a21 | Triage

Sharing

General

Target

beba31281b7dc94003794887dec8807b1219b978072f6b11aa7cc2266cd10a21
Size

212KB
Sample

221201-3vzd5agd8t
MD5

319405237b819b26857ee8e3b6846064
SHA1

7c0b62a15465b893688701d1e81878f6eaeb7d9c
SHA256

beba31281b7dc94003794887dec8807b1219b978072f6b11aa7cc2266cd10a21
SHA512

e4058ec9eb20a12d58e3a3d8a02e379bf11f0a079d87580152fdef73f25884689700f7eddbac9bfeb11d37334aafa5810fdee66bca2ce96e2c02ea921836b043
SSDEEP

6144:34dAQlUWF/B/XQSA5g9+plxVSzfuDkZHxpZgyagnZYsHmv+3sH3OU5GGE9EsWR1h:o2QHEgnZYsG

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  beba31281b7dc94003794887dec8807b1219b978072f6b11aa7cc2266cd10a21
- Size
  
  212KB
- MD5
  
  319405237b819b26857ee8e3b6846064
- SHA1
  
  7c0b62a15465b893688701d1e81878f6eaeb7d9c
- SHA256
  
  beba31281b7dc94003794887dec8807b1219b978072f6b11aa7cc2266cd10a21
- SHA512
  
  e4058ec9eb20a12d58e3a3d8a02e379bf11f0a079d87580152fdef73f25884689700f7eddbac9bfeb11d37334aafa5810fdee66bca2ce96e2c02ea921836b043
- SSDEEP
  
  6144:34dAQlUWF/B/XQSA5g9+plxVSzfuDkZHxpZgyagnZYsHmv+3sH3OU5GGE9EsWR1h:o2QHEgnZYsG
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence