350d8512584ffc816ae66c5736f4e9cbde2bad93b9f966fa6497c84f9778c796 | Triage

Sharing

General

Target

350d8512584ffc816ae66c5736f4e9cbde2bad93b9f966fa6497c84f9778c796
Size

158KB
Sample

231010-p2l6gsde6w
MD5

05425511e8bf67c093c31870943ce828
SHA1

d34822224f307a99ecb99a31431ec11461cf9c87
SHA256

350d8512584ffc816ae66c5736f4e9cbde2bad93b9f966fa6497c84f9778c796
SHA512

0b1664a8f7c1ea87be217d9d5e86d7196110d248585647209e56b534fd590c52615296e658b22115590b31401d93e87dbfcc4be23c1425a6c2247588168c5fee
SSDEEP

3072:b+Urn+Hxj7pOPsomzit2WbBiF26yhyHr3dIt6Wn5Nzu:baRpO0oxtjbjget6Wn5Nz

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  350d8512584ffc816ae66c5736f4e9cbde2bad93b9f966fa6497c84f9778c796
- Size
  
  158KB
- MD5
  
  05425511e8bf67c093c31870943ce828
- SHA1
  
  d34822224f307a99ecb99a31431ec11461cf9c87
- SHA256
  
  350d8512584ffc816ae66c5736f4e9cbde2bad93b9f966fa6497c84f9778c796
- SHA512
  
  0b1664a8f7c1ea87be217d9d5e86d7196110d248585647209e56b534fd590c52615296e658b22115590b31401d93e87dbfcc4be23c1425a6c2247588168c5fee
- SSDEEP
  
  3072:b+Urn+Hxj7pOPsomzit2WbBiF26yhyHr3dIt6Wn5Nzu:baRpO0oxtjbjget6Wn5Nz
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2