7d0816ee63c03899d4656d5ae46de2c2598d4787556bb48b18869f48d9f95505 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

188d6347a2c0fe1cbd1f8a35c9960383
Size

54KB
Sample

231224-27k7laahfj
MD5

188d6347a2c0fe1cbd1f8a35c9960383
SHA1

3555b132f63b2cecb59b3f66e16cdee3f19172d7
SHA256

7d0816ee63c03899d4656d5ae46de2c2598d4787556bb48b18869f48d9f95505
SHA512

393c0620521824b96ec406403e77ffb79b28e0ee23b0d609bc20a12bfa5c541d093ff736a6d285308950cc5e61548ae72c5bc417ea55e93e39fe36ae9b6b35b6
SSDEEP

768:mrpGUKbGPhgSRA9gjfeXZ8veIjJ0cAugnbcuyD7UM:mLbRAKzeXZ8GIxRgnouy8M

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  188d6347a2c0fe1cbd1f8a35c9960383
- Size
  
  54KB
- MD5
  
  188d6347a2c0fe1cbd1f8a35c9960383
- SHA1
  
  3555b132f63b2cecb59b3f66e16cdee3f19172d7
- SHA256
  
  7d0816ee63c03899d4656d5ae46de2c2598d4787556bb48b18869f48d9f95505
- SHA512
  
  393c0620521824b96ec406403e77ffb79b28e0ee23b0d609bc20a12bfa5c541d093ff736a6d285308950cc5e61548ae72c5bc417ea55e93e39fe36ae9b6b35b6
- SSDEEP
  
  768:mrpGUKbGPhgSRA9gjfeXZ8veIjJ0cAugnbcuyD7UM:mLbRAKzeXZ8GIxRgnouy8M
Score

8^/10

evasion persistence
- Stops running service(s)
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Impair Defenses

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence