a59903752f2cdb99c217aef8c9ffeea65e7d9355a3f3874840efbbf03036d6c7 | Triage

Sharing

General

Target

a59903752f2cdb99c217aef8c9ffeea65e7d9355a3f3874840efbbf03036d6c7
Size

333KB
Sample

221201-yvqprsff28
MD5

beb1891ef5f622adcf8e4ca2394299f6
SHA1

9fc668addccc723d3ffc6493e1d214cbbb6755da
SHA256

a59903752f2cdb99c217aef8c9ffeea65e7d9355a3f3874840efbbf03036d6c7
SHA512

c0f7ac167bbba14152d162813b130ba50a6fe06bcd47f451468a0ac2f64cd188cb6a3676b16c22c8190b0edcb9b8a6f1262ab076c9a39c6213cfab7117df6eeb
SSDEEP

6144:yKunelrO5BdNiWK9kPWXButhIEOgMrZkld+8FI5jJkLklCVJIaUCP:8e05BDufWLQZAU5qLhdP

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  a59903752f2cdb99c217aef8c9ffeea65e7d9355a3f3874840efbbf03036d6c7
- Size
  
  333KB
- MD5
  
  beb1891ef5f622adcf8e4ca2394299f6
- SHA1
  
  9fc668addccc723d3ffc6493e1d214cbbb6755da
- SHA256
  
  a59903752f2cdb99c217aef8c9ffeea65e7d9355a3f3874840efbbf03036d6c7
- SHA512
  
  c0f7ac167bbba14152d162813b130ba50a6fe06bcd47f451468a0ac2f64cd188cb6a3676b16c22c8190b0edcb9b8a6f1262ab076c9a39c6213cfab7117df6eeb
- SSDEEP
  
  6144:yKunelrO5BdNiWK9kPWXButhIEOgMrZkld+8FI5jJkLklCVJIaUCP:8e05BDufWLQZAU5qLhdP
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2