8e02312f540275875ccbe10a5b6fa6f300463ff9e69332a4a9512654252233f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

165ea3c204e269e8e2d314a012783e67
Size

425KB
Sample

231225-l88raadhe2
MD5

165ea3c204e269e8e2d314a012783e67
SHA1

047809d2c5b510461c6e899242df02030215ed82
SHA256

8e02312f540275875ccbe10a5b6fa6f300463ff9e69332a4a9512654252233f5
SHA512

8610638eb4d9e0355c530086272532b846e95c94a5e4e9c18828e9d0e49ed022ec3ce0ef16044f8710b149a56c7bce5e3a357e4ded6086c933f988909d59268f
SSDEEP

12288:wWPfpxNzSBwlcACfGcy+Ovln0GBgfnVDbPP:wWPflzQwlcAUGh+Odnpg1P

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  165ea3c204e269e8e2d314a012783e67
- Size
  
  425KB
- MD5
  
  165ea3c204e269e8e2d314a012783e67
- SHA1
  
  047809d2c5b510461c6e899242df02030215ed82
- SHA256
  
  8e02312f540275875ccbe10a5b6fa6f300463ff9e69332a4a9512654252233f5
- SHA512
  
  8610638eb4d9e0355c530086272532b846e95c94a5e4e9c18828e9d0e49ed022ec3ce0ef16044f8710b149a56c7bce5e3a357e4ded6086c933f988909d59268f
- SSDEEP
  
  12288:wWPfpxNzSBwlcACfGcy+Ovln0GBgfnVDbPP:wWPflzQwlcAUGh+Odnpg1P
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2