5134a9e74f3bb914628aa1bfb42847cf880612ed38ea080ead0bd1b4a8e39a53 | Triage

Sharing

General

Target

0045af89dc768e53dfbe91ce2580b2dc
Size

45KB
Sample

231229-wyeesscdc5
MD5

0045af89dc768e53dfbe91ce2580b2dc
SHA1

6ccf402e3a33730c913ca8b9366e4e663df0500b
SHA256

5134a9e74f3bb914628aa1bfb42847cf880612ed38ea080ead0bd1b4a8e39a53
SHA512

5b1c11b810e384b78396f629a2d395231f3f5ae230bc2ed41c8a9be0dfad2a62301067148c64f305518659ea8501b700c13501719cf215345106134a7350400a
SSDEEP

768:c3Y3v3t3E3dgdbV7zOjy16fggB1+2fKZmcL/MywOlS51rBFtFRutcN4XSLQmLUt:c3Y3v3t3E3AMy1jgy3ocLfYvbuyaX6QB

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  0045af89dc768e53dfbe91ce2580b2dc
- Size
  
  45KB
- MD5
  
  0045af89dc768e53dfbe91ce2580b2dc
- SHA1
  
  6ccf402e3a33730c913ca8b9366e4e663df0500b
- SHA256
  
  5134a9e74f3bb914628aa1bfb42847cf880612ed38ea080ead0bd1b4a8e39a53
- SHA512
  
  5b1c11b810e384b78396f629a2d395231f3f5ae230bc2ed41c8a9be0dfad2a62301067148c64f305518659ea8501b700c13501719cf215345106134a7350400a
- SSDEEP
  
  768:c3Y3v3t3E3dgdbV7zOjy16fggB1+2fKZmcL/MywOlS51rBFtFRutcN4XSLQmLUt:c3Y3v3t3E3AMy1jgy3ocLfYvbuyaX6QB
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2