8310cc7c360863351d34b14d6401cd027b8b412429190bc199fa38c4b4899e9c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8310cc7c360863351d34b14d6401cd027b8b412429190bc199fa38c4b4899e9c
Size

212KB
Sample

221201-3wfcmsge2y
MD5

fd6b7739e7699b6492f4e26b994309db
SHA1

c97c253def97399dfda45c4424e5f68fd87299e2
SHA256

8310cc7c360863351d34b14d6401cd027b8b412429190bc199fa38c4b4899e9c
SHA512

5cbfb037d08a84505e3135db00039503a8ae0cf3c9810219f0b392890631d52a77c8f518db3c1b177c16fc95125f77220822110159dadbd1bfd92342a18ba444
SSDEEP

3072:R9UB99PLzQsJhGYiNAcXOqQnys80/p5GomjRMEQYbLlmuPU+BfPc1rPU35pJucyU:RqBj2OqQn580/JXEJpc1rPXi

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  8310cc7c360863351d34b14d6401cd027b8b412429190bc199fa38c4b4899e9c
- Size
  
  212KB
- MD5
  
  fd6b7739e7699b6492f4e26b994309db
- SHA1
  
  c97c253def97399dfda45c4424e5f68fd87299e2
- SHA256
  
  8310cc7c360863351d34b14d6401cd027b8b412429190bc199fa38c4b4899e9c
- SHA512
  
  5cbfb037d08a84505e3135db00039503a8ae0cf3c9810219f0b392890631d52a77c8f518db3c1b177c16fc95125f77220822110159dadbd1bfd92342a18ba444
- SSDEEP
  
  3072:R9UB99PLzQsJhGYiNAcXOqQnys80/p5GomjRMEQYbLlmuPU+BfPc1rPU35pJucyU:RqBj2OqQn580/JXEJpc1rPXi
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence