1b5ec0651d11c75ca2b0dccd326ff7162611b39573be11685e33a695c169e59f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fd0a5de9f1d148440dbd0353f462ff0
Size

2.0MB
Sample

231226-dv548seefk
MD5

4fd0a5de9f1d148440dbd0353f462ff0
SHA1

3e6ac43e31c012cac7841c0ca8fb2646319d7cd1
SHA256

1b5ec0651d11c75ca2b0dccd326ff7162611b39573be11685e33a695c169e59f
SHA512

9babeb010c8ab8bdd0c19a4905598d11c0b555c4be7e9a0ab103aeb17427bdd199681b6b5aa192e4b8c83dd13cb35519c8325bd8c06ab1ca5ff435768b46c8d2
SSDEEP

49152:hMLYQ14UMSMlJk8Q+RirQzqfa+nJSFDDyQ7QUgir8JVByo0e:hM1LMev+RUQ0SJDLUGrOuo

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  4fd0a5de9f1d148440dbd0353f462ff0
- Size
  
  2.0MB
- MD5
  
  4fd0a5de9f1d148440dbd0353f462ff0
- SHA1
  
  3e6ac43e31c012cac7841c0ca8fb2646319d7cd1
- SHA256
  
  1b5ec0651d11c75ca2b0dccd326ff7162611b39573be11685e33a695c169e59f
- SHA512
  
  9babeb010c8ab8bdd0c19a4905598d11c0b555c4be7e9a0ab103aeb17427bdd199681b6b5aa192e4b8c83dd13cb35519c8325bd8c06ab1ca5ff435768b46c8d2
- SSDEEP
  
  49152:hMLYQ14UMSMlJk8Q+RirQzqfa+nJSFDDyQ7QUgir8JVByo0e:hM1LMev+RUQ0SJDLUGrOuo
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2