e26c7fdae430732a726228813be529e430265e991121c9bd5d45062d3295c9cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03557c4fc0a85d4042429cf22ddef7b9
Size

134KB
Sample

231224-snc77scebq
MD5

03557c4fc0a85d4042429cf22ddef7b9
SHA1

9c63cce266e92d981e79044c96d4e4192b7e7516
SHA256

e26c7fdae430732a726228813be529e430265e991121c9bd5d45062d3295c9cd
SHA512

4faf9903317def3c11a8be2e1e9b4c0f43672761b942fc188620977b68cc66fb8c3779823eeadbc19a3c6dafec9f86835be2a8509155af01ad1ace49dffb8c86
SSDEEP

3072:6eLOlpnUXM5ODKVwP7a4VTNYGbbRoWyU4hi0DwyP:6eLOXUXM5OCMOOytTEe

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  03557c4fc0a85d4042429cf22ddef7b9
- Size
  
  134KB
- MD5
  
  03557c4fc0a85d4042429cf22ddef7b9
- SHA1
  
  9c63cce266e92d981e79044c96d4e4192b7e7516
- SHA256
  
  e26c7fdae430732a726228813be529e430265e991121c9bd5d45062d3295c9cd
- SHA512
  
  4faf9903317def3c11a8be2e1e9b4c0f43672761b942fc188620977b68cc66fb8c3779823eeadbc19a3c6dafec9f86835be2a8509155af01ad1ace49dffb8c86
- SSDEEP
  
  3072:6eLOlpnUXM5ODKVwP7a4VTNYGbbRoWyU4hi0DwyP:6eLOXUXM5OCMOOytTEe
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2