Triage | Malware sandboxing report by Hatching Triage

Resubmissions

18-12-2022 19:20

221218-x171kade37 8

Sharing

General

Target

Clip1.exe
Size

3MB
Sample

221218-x171kade37
MD5

b3bdc2917c3da808b4ad664c7a3f9e73
SHA1

4939ad3241c08b1c1de578ee44465022ecfbe7b5
SHA256

4b69a709a92dbb92ab156d5cc5b84a844ec16a10e04e6be4893f7af75be8e40f
SHA512

53e7579532a920f01a2f8b2b6514a0fbd2ca87e86f71a34d9c5d6b6cc182827a5f686cc6bb81dc65240762def27616f5695a97507640f53d5ea874830a902107
SSDEEP

49152:ARIb8Wraq2Djq78ew2J/4fIxjwbTfkNydrGOGv1hnJh0Jo3ahOYPW6odcnyGdhb8:ATS8ew2J/7B+q0ErklWds4W2

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  Clip1.exe
- Size
  
  3MB
- MD5
  
  b3bdc2917c3da808b4ad664c7a3f9e73
- SHA1
  
  4939ad3241c08b1c1de578ee44465022ecfbe7b5
- SHA256
  
  4b69a709a92dbb92ab156d5cc5b84a844ec16a10e04e6be4893f7af75be8e40f
- SHA512
  
  53e7579532a920f01a2f8b2b6514a0fbd2ca87e86f71a34d9c5d6b6cc182827a5f686cc6bb81dc65240762def27616f5695a97507640f53d5ea874830a902107
- SSDEEP
  
  49152:ARIb8Wraq2Djq78ew2J/4fIxjwbTfkNydrGOGv1hnJh0Jo3ahOYPW6odcnyGdhb8:ATS8ew2J/7B+q0ErklWds4W2
Score

8^/10

discovery
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Modifies file permissions
  discovery
behavioral1 behavioral2

MITRE ATT&CK Matrix

Collection

Command and Control

Credential Access

Defense Evasion

File Permissions Modification

Discovery

Execution

Exfiltration

Impact

Initial Access

Lateral Movement

Persistence

Scheduled Task

Privilege Escalation

Tasks

static1

behavioral1

behavioral2