a90e764c64750a5a43c3b10ea6f0bac936e23be4b83148078b3ad0e6f2d5889c | Triage

Sharing

General

Target

a90e764c64750a5a43c3b10ea6f0bac936e23be4b83148078b3ad0e6f2d5889c
Size

84KB
Sample

221205-l4bkzsdc3s
MD5

0f9b01a5a3c79f85168643bc67e50785
SHA1

0bc20598b5455ed40e455b8c1514e438faf3285e
SHA256

a90e764c64750a5a43c3b10ea6f0bac936e23be4b83148078b3ad0e6f2d5889c
SHA512

42944161f8004bdc011577d3a3470731e08f2f88b25c6537c0b6e885d0c4c8b3203f5b5356991085a2427b2f5e3848435703c6010edea06c1737da76ea1c747e
SSDEEP

1536:yIh9ot5gFyW7nmPn9UrYZl+4gSr7AFJGVmvkCWnU4W+:FY6FyWCDl+4FmXWnUP+

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  a90e764c64750a5a43c3b10ea6f0bac936e23be4b83148078b3ad0e6f2d5889c
- Size
  
  84KB
- MD5
  
  0f9b01a5a3c79f85168643bc67e50785
- SHA1
  
  0bc20598b5455ed40e455b8c1514e438faf3285e
- SHA256
  
  a90e764c64750a5a43c3b10ea6f0bac936e23be4b83148078b3ad0e6f2d5889c
- SHA512
  
  42944161f8004bdc011577d3a3470731e08f2f88b25c6537c0b6e885d0c4c8b3203f5b5356991085a2427b2f5e3848435703c6010edea06c1737da76ea1c747e
- SSDEEP
  
  1536:yIh9ot5gFyW7nmPn9UrYZl+4gSr7AFJGVmvkCWnU4W+:FY6FyWCDl+4FmXWnUP+
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence