c3e67eaa81c08b734fd310644df2e2777e86fb89e37eeaa5a5f542528f4cf4f3 | Triage

Sharing

General

Target

6be4a7c074dc461c8c9e74bedaf5c41d.bin
Size

61KB
Sample

231116-cj3pasgc9y
MD5

6be4a7c074dc461c8c9e74bedaf5c41d
SHA1

0535964d5cf5e58c7608722d65767c9a33bda831
SHA256

c3e67eaa81c08b734fd310644df2e2777e86fb89e37eeaa5a5f542528f4cf4f3
SHA512

d488d4656709a49a680260c7db653744795d5050f5eaa4449e2aa214056f2a5bb89c66a3e87a23aba9f42582ff2a03d7d11be32333ffe22591dc23b8d1227d6c
SSDEEP

1536:1Zhz2/YIkg4dbxkbZqxwmAi+6zwoOUSBJX3:1ZhAYIkgobxkbZFiTOUcJn

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  6be4a7c074dc461c8c9e74bedaf5c41d.bin
- Size
  
  61KB
- MD5
  
  6be4a7c074dc461c8c9e74bedaf5c41d
- SHA1
  
  0535964d5cf5e58c7608722d65767c9a33bda831
- SHA256
  
  c3e67eaa81c08b734fd310644df2e2777e86fb89e37eeaa5a5f542528f4cf4f3
- SHA512
  
  d488d4656709a49a680260c7db653744795d5050f5eaa4449e2aa214056f2a5bb89c66a3e87a23aba9f42582ff2a03d7d11be32333ffe22591dc23b8d1227d6c
- SSDEEP
  
  1536:1Zhz2/YIkg4dbxkbZqxwmAi+6zwoOUSBJX3:1ZhAYIkgobxkbZFiTOUcJn
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2