blackguard | 00028d16483f61291c337d7153ddddb77783a28a0b9cf4c5c0664260bac174f7 | Triage

Sharing

General

Target

00028d16483f61291c337d7153ddddb77783a28a0b9cf4c5c0664260bac174f7
Size

25.9MB
Sample

231130-cbb7daeg7v
MD5

d298d38032ed87f1fb527864e7427a20
SHA1

7cde02530d4c6c9a1408afcba23892bb19e875df
SHA256

00028d16483f61291c337d7153ddddb77783a28a0b9cf4c5c0664260bac174f7
SHA512

61f5f9354307c2014cb827bf8bb8e52beabafc3f406cd01495fea04bb3146519815648e347be19854ce1810c797d167a1af43d9c5af64108e1f8647fd0000598
SSDEEP

196608:XmXXTYoIKX52VJjG7LoRCeJUk0gYIek5LlKoq8h02MbPOEg:XIlIKX52VEyIA5LlKoq8JMbM

Score

10^/10

blackguard persistence

Malware Config

Targets

- Target
  
  00028d16483f61291c337d7153ddddb77783a28a0b9cf4c5c0664260bac174f7
- Size
  
  25.9MB
- MD5
  
  d298d38032ed87f1fb527864e7427a20
- SHA1
  
  7cde02530d4c6c9a1408afcba23892bb19e875df
- SHA256
  
  00028d16483f61291c337d7153ddddb77783a28a0b9cf4c5c0664260bac174f7
- SHA512
  
  61f5f9354307c2014cb827bf8bb8e52beabafc3f406cd01495fea04bb3146519815648e347be19854ce1810c797d167a1af43d9c5af64108e1f8647fd0000598
- SSDEEP
  
  196608:XmXXTYoIKX52VJjG7LoRCeJUk0gYIek5LlKoq8h02MbPOEg:XIlIKX52VEyIA5LlKoq8JMbM
Score

5^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2