724f88a6a77e72621301c29899b827b7fb947be5a76003ea7959ad4f5199bdaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

489f739e5b26bd5037ff378188f87864
Size

367KB
Sample

231226-bne85abcc9
MD5

489f739e5b26bd5037ff378188f87864
SHA1

c92453e14361b42533482e9ae0e5c687df419b25
SHA256

724f88a6a77e72621301c29899b827b7fb947be5a76003ea7959ad4f5199bdaf
SHA512

edf5843d8712228e95e882347cfcc63f8ed7d5f789c8459fa7969a1a032147aca778a0e196d8b408494086383aac3b0af1283a37d00922d5bdec62bcd8103902
SSDEEP

6144:Os8LzwROGvhrz8o3XdJ1hrz8o3XdJd3VWS+fwrI8:OLLs8AdVd528

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  489f739e5b26bd5037ff378188f87864
- Size
  
  367KB
- MD5
  
  489f739e5b26bd5037ff378188f87864
- SHA1
  
  c92453e14361b42533482e9ae0e5c687df419b25
- SHA256
  
  724f88a6a77e72621301c29899b827b7fb947be5a76003ea7959ad4f5199bdaf
- SHA512
  
  edf5843d8712228e95e882347cfcc63f8ed7d5f789c8459fa7969a1a032147aca778a0e196d8b408494086383aac3b0af1283a37d00922d5bdec62bcd8103902
- SSDEEP
  
  6144:Os8LzwROGvhrz8o3XdJ1hrz8o3XdJd3VWS+fwrI8:OLLs8AdVd528
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence