a7c05ac32fdedd9901304927a9b6b78945e6f43e84bc79847e11da3f1f93fbd7 | Triage

Sharing

General

Target

a7c05ac32fdedd9901304927a9b6b78945e6f43e84bc79847e11da3f1f93fbd7
Size

204KB
Sample

221204-a4je2sca78
MD5

01f214bdd6b2145637319ba6707e5490
SHA1

b1b2b100e779d5043412c8061f9cdf4d2228d793
SHA256

a7c05ac32fdedd9901304927a9b6b78945e6f43e84bc79847e11da3f1f93fbd7
SHA512

bfffc5c02c9731e35b5d9bffa01d24be3edc9ac3ebe4072ea7e51dc640bd61e77ddb6188712d0411d7ec213bba8496a9dba068d78fba1cb0942010ec8861c5ae
SSDEEP

1536:8oihFMkcerY2D74g+oSkg8dBOhHvEPMtWf/son4NaPMktE5VsZGzNdka6fl1txmh:GbA5VsZGzNdB6fl1txmO62WIYl

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  a7c05ac32fdedd9901304927a9b6b78945e6f43e84bc79847e11da3f1f93fbd7
- Size
  
  204KB
- MD5
  
  01f214bdd6b2145637319ba6707e5490
- SHA1
  
  b1b2b100e779d5043412c8061f9cdf4d2228d793
- SHA256
  
  a7c05ac32fdedd9901304927a9b6b78945e6f43e84bc79847e11da3f1f93fbd7
- SHA512
  
  bfffc5c02c9731e35b5d9bffa01d24be3edc9ac3ebe4072ea7e51dc640bd61e77ddb6188712d0411d7ec213bba8496a9dba068d78fba1cb0942010ec8861c5ae
- SSDEEP
  
  1536:8oihFMkcerY2D74g+oSkg8dBOhHvEPMtWf/son4NaPMktE5VsZGzNdka6fl1txmh:GbA5VsZGzNdB6fl1txmO62WIYl
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence