35b2ee61f20c7d658921d7562bccc3cc7a576924155b6de9dc3aba3ccf453df7 | Triage

Sharing

General

Target

067e9caa314e30ebbb0e6e91d463c029
Size

444KB
Sample

231224-vakfgafba7
MD5

067e9caa314e30ebbb0e6e91d463c029
SHA1

5a6aa6f342451fcdc500c0c43cfc9a87060fd64e
SHA256

35b2ee61f20c7d658921d7562bccc3cc7a576924155b6de9dc3aba3ccf453df7
SHA512

615b3093493ccfe6a82bfdadf31aea9ba259a394fde3569fba119c2373592b387a490514c1151a9689212f59e1239bdf4a146f83a603ee5580cf83b7fde7e95f
SSDEEP

12288:wutrzh9xOXk7GMHOJxl/0z+uoqzBTQGteb:wutr5OUStD/0zpJW

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  067e9caa314e30ebbb0e6e91d463c029
- Size
  
  444KB
- MD5
  
  067e9caa314e30ebbb0e6e91d463c029
- SHA1
  
  5a6aa6f342451fcdc500c0c43cfc9a87060fd64e
- SHA256
  
  35b2ee61f20c7d658921d7562bccc3cc7a576924155b6de9dc3aba3ccf453df7
- SHA512
  
  615b3093493ccfe6a82bfdadf31aea9ba259a394fde3569fba119c2373592b387a490514c1151a9689212f59e1239bdf4a146f83a603ee5580cf83b7fde7e95f
- SSDEEP
  
  12288:wutrzh9xOXk7GMHOJxl/0z+uoqzBTQGteb:wutr5OUStD/0zpJW
Score

8^/10

evasion persistence
- Creates new service(s)
  persistence
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence