cd7915b5397a2bb7a83003233e4731c0ba6958c2299e1f84e5bec6427473fc42 | Triage

Sharing

General

Target

cd7915b5397a2bb7a83003233e4731c0ba6958c2299e1f84e5bec6427473fc42
Size

88KB
Sample

221205-lany8aae7y
MD5

4b5c3c5b00deec80b1f1627637b3bee0
SHA1

047baa3e23f965ef7ce8e23274db1dceb4c24dad
SHA256

cd7915b5397a2bb7a83003233e4731c0ba6958c2299e1f84e5bec6427473fc42
SHA512

ec2229e449437a06b47120730ad04cd157cd01f3f44448d959ae4c7db9cc4dc2c1a452bc22429ddbf1f350093fb1fc15af75cd6e3eebb56f5ddd371d057344bf
SSDEEP

768:7LT9rFEGNu34C/lfQzxKztTp8KS5k+qIYvCdUwY7EqVN14+QCnq/K/7dm:7LTsGGloAztd8HtPY7DN14Oqi/7

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  cd7915b5397a2bb7a83003233e4731c0ba6958c2299e1f84e5bec6427473fc42
- Size
  
  88KB
- MD5
  
  4b5c3c5b00deec80b1f1627637b3bee0
- SHA1
  
  047baa3e23f965ef7ce8e23274db1dceb4c24dad
- SHA256
  
  cd7915b5397a2bb7a83003233e4731c0ba6958c2299e1f84e5bec6427473fc42
- SHA512
  
  ec2229e449437a06b47120730ad04cd157cd01f3f44448d959ae4c7db9cc4dc2c1a452bc22429ddbf1f350093fb1fc15af75cd6e3eebb56f5ddd371d057344bf
- SSDEEP
  
  768:7LT9rFEGNu34C/lfQzxKztTp8KS5k+qIYvCdUwY7EqVN14+QCnq/K/7dm:7LTsGGloAztd8HtPY7DN14Oqi/7
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence