7b9efdebc2f1ec3d054d3c26a03332eda7b2119375d818ba4d42c410aab70a63 | Triage

Sharing

General

Target

35f7291181e305ff389af8a226f7c947
Size

35KB
Sample

231225-xj7y8sfcel
MD5

35f7291181e305ff389af8a226f7c947
SHA1

5cd4e9d616c01edbb4a97ccd1bd240ef66192712
SHA256

7b9efdebc2f1ec3d054d3c26a03332eda7b2119375d818ba4d42c410aab70a63
SHA512

afdcaecedce5546b513f75549a44051bdfe1c22cf59ca40383e8c1db894688124361155995891b56475394502aacf7c23ea017ae62e727bf8943b56b399ea777
SSDEEP

768:VfgffwhokkJK8mOTniMkCSx/hz22DyV9T7A08SV:VfgghTUlTniMoxE19TE0h

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  35f7291181e305ff389af8a226f7c947
- Size
  
  35KB
- MD5
  
  35f7291181e305ff389af8a226f7c947
- SHA1
  
  5cd4e9d616c01edbb4a97ccd1bd240ef66192712
- SHA256
  
  7b9efdebc2f1ec3d054d3c26a03332eda7b2119375d818ba4d42c410aab70a63
- SHA512
  
  afdcaecedce5546b513f75549a44051bdfe1c22cf59ca40383e8c1db894688124361155995891b56475394502aacf7c23ea017ae62e727bf8943b56b399ea777
- SSDEEP
  
  768:VfgffwhokkJK8mOTniMkCSx/hz22DyV9T7A08SV:VfgghTUlTniMoxE19TE0h
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2