11801eb4f01329d4b415a43b6a98f8da25274b96675aff9c41b89c1d46bb4581 | Triage

Sharing

General

Target

e44f15d4120d3bc4224d881e665145f0_exe32.exe
Size

46KB
Sample

231015-yjkz5saa53
MD5

e44f15d4120d3bc4224d881e665145f0
SHA1

c3a7f1e6ef057312845bf73015570eb117de84bd
SHA256

11801eb4f01329d4b415a43b6a98f8da25274b96675aff9c41b89c1d46bb4581
SHA512

9b61c51ccaf39726e0c6942517ff198c5b46a814a822d4d9d2bddc5c6706107b474fe2bef8a16ab00466cf6a47e4a7dd19bc8c0415db3b0251fb0aa9e329713b
SSDEEP

768:xLzrPIsVU080KYmz/IfhX5GaeimBYsHotogR8ARwre7zgVqMNWcRFD7Dpo:lvU080dGSh4Fb08ATzgV5Wco

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  e44f15d4120d3bc4224d881e665145f0_exe32.exe
- Size
  
  46KB
- MD5
  
  e44f15d4120d3bc4224d881e665145f0
- SHA1
  
  c3a7f1e6ef057312845bf73015570eb117de84bd
- SHA256
  
  11801eb4f01329d4b415a43b6a98f8da25274b96675aff9c41b89c1d46bb4581
- SHA512
  
  9b61c51ccaf39726e0c6942517ff198c5b46a814a822d4d9d2bddc5c6706107b474fe2bef8a16ab00466cf6a47e4a7dd19bc8c0415db3b0251fb0aa9e329713b
- SSDEEP
  
  768:xLzrPIsVU080KYmz/IfhX5GaeimBYsHotogR8ARwre7zgVqMNWcRFD7Dpo:lvU080dGSh4Fb08ATzgV5Wco
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2