7de519f83fe48681a7c17c868c8d9c7db533904b54b48517218de458ba15d842 | Triage

Sharing

General

Target

276c48503f698413f7366d9728b78ddf
Size

159KB
Sample

231225-sbtdnadbdk
MD5

276c48503f698413f7366d9728b78ddf
SHA1

9b48ee94af79d37ce11e60069e114940bfadabc0
SHA256

7de519f83fe48681a7c17c868c8d9c7db533904b54b48517218de458ba15d842
SHA512

2a57b017abfb1d9d9d407f50c07a76524b3b1d0b1fe252faa15981416d725c107af394d4b2424c6c86cede93a55cc45f84d399e832b40472d069062121cf7077
SSDEEP

3072:IXbYCtTUzUxIsAQihedBZF9U+5JWu7l5Tk:4UCtTUzNsHdBZ95J/l6

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  276c48503f698413f7366d9728b78ddf
- Size
  
  159KB
- MD5
  
  276c48503f698413f7366d9728b78ddf
- SHA1
  
  9b48ee94af79d37ce11e60069e114940bfadabc0
- SHA256
  
  7de519f83fe48681a7c17c868c8d9c7db533904b54b48517218de458ba15d842
- SHA512
  
  2a57b017abfb1d9d9d407f50c07a76524b3b1d0b1fe252faa15981416d725c107af394d4b2424c6c86cede93a55cc45f84d399e832b40472d069062121cf7077
- SSDEEP
  
  3072:IXbYCtTUzUxIsAQihedBZF9U+5JWu7l5Tk:4UCtTUzNsHdBZ95J/l6
Score

8^/10

evasion
- Modifies Windows Firewall
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2