77f57ccf1b7b7a2bfc1a549d98a819a515b39a305248bc820d0ff392e352fc92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07fe831123d550e74c5bba7fdce6b76e
Size

188KB
Sample

231224-vt88yagehk
MD5

07fe831123d550e74c5bba7fdce6b76e
SHA1

b4456506a3e5d544f9ec86823b696d37a8c86ae5
SHA256

77f57ccf1b7b7a2bfc1a549d98a819a515b39a305248bc820d0ff392e352fc92
SHA512

3376fee2cba7850b9c22616aec76edcc1bd3c2b4af630fcafc631c39ec8b6924dbf73a06b53adfa3591a1de246eb0c574aaf3088b4ea12394afe7f6f935ff4cb
SSDEEP

3072:3NkCNEac2ftrBQc8Al7vHC4zi4Agsu5vWQCR:3NTNEuRCgi4XsuoQ

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  07fe831123d550e74c5bba7fdce6b76e
- Size
  
  188KB
- MD5
  
  07fe831123d550e74c5bba7fdce6b76e
- SHA1
  
  b4456506a3e5d544f9ec86823b696d37a8c86ae5
- SHA256
  
  77f57ccf1b7b7a2bfc1a549d98a819a515b39a305248bc820d0ff392e352fc92
- SHA512
  
  3376fee2cba7850b9c22616aec76edcc1bd3c2b4af630fcafc631c39ec8b6924dbf73a06b53adfa3591a1de246eb0c574aaf3088b4ea12394afe7f6f935ff4cb
- SSDEEP
  
  3072:3NkCNEac2ftrBQc8Al7vHC4zi4Agsu5vWQCR:3NTNEuRCgi4XsuoQ
Score

8^/10

evasion
- Drops file in Drivers directory
- Stops running service(s)
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

behavioral2