81f7f65f317116b17f1b06091cf959bd415a95123925c50e58fc0c576e94d8a0 | Triage

Sharing

General

Target

81f7f65f317116b17f1b06091cf959bd415a95123925c50e58fc0c576e94d8a0
Size

92KB
Sample

221205-1c7lnshe29
MD5

d86e720a88533e62cadd418b2f2f7599
SHA1

4d4f7b9635ce2554e8bf9f57f970061a1f219191
SHA256

81f7f65f317116b17f1b06091cf959bd415a95123925c50e58fc0c576e94d8a0
SHA512

7a946ede59812f1f4dd3e460f81b2c610c27fafee12443586f4bd49e041e073a8c99da09da38362f6546fe3818f29c1d3f50c938754f0e9d21c55b17e2166887
SSDEEP

1536:/giuHKiksDOIeAMGXGyoI9y+kpFm94msrP9UnCcyUngZuc163Xqqi9T:YnKtsDOpAMGXGyoI9kpFm94msrP9UCc8

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  81f7f65f317116b17f1b06091cf959bd415a95123925c50e58fc0c576e94d8a0
- Size
  
  92KB
- MD5
  
  d86e720a88533e62cadd418b2f2f7599
- SHA1
  
  4d4f7b9635ce2554e8bf9f57f970061a1f219191
- SHA256
  
  81f7f65f317116b17f1b06091cf959bd415a95123925c50e58fc0c576e94d8a0
- SHA512
  
  7a946ede59812f1f4dd3e460f81b2c610c27fafee12443586f4bd49e041e073a8c99da09da38362f6546fe3818f29c1d3f50c938754f0e9d21c55b17e2166887
- SSDEEP
  
  1536:/giuHKiksDOIeAMGXGyoI9y+kpFm94msrP9UnCcyUngZuc163Xqqi9T:YnKtsDOpAMGXGyoI9kpFm94msrP9UCc8
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2