e48d30d2c781d18c59cb543008c2b1ada45894e4985868e9ba2e2c6e13177a2e | Triage

Sharing

General

Target

0153c459dfa933ede22885a57b467cb1
Size

188KB
Sample

231229-xvs98abhe9
MD5

0153c459dfa933ede22885a57b467cb1
SHA1

50a1ecaa12fbdeb4ffc7bc37f6b97286f95dee51
SHA256

e48d30d2c781d18c59cb543008c2b1ada45894e4985868e9ba2e2c6e13177a2e
SHA512

f348ea08916715dbaa4a58f37030f4bc76e96b25a2c59b75427aba57ecd9ffc6b06e9098573e20709fdecc9589b46134e3e39d63e7e28afccb678adae5ffeb4f
SSDEEP

3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8dh1j:o68i3odBiTl2+TCU/s1j

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  0153c459dfa933ede22885a57b467cb1
- Size
  
  188KB
- MD5
  
  0153c459dfa933ede22885a57b467cb1
- SHA1
  
  50a1ecaa12fbdeb4ffc7bc37f6b97286f95dee51
- SHA256
  
  e48d30d2c781d18c59cb543008c2b1ada45894e4985868e9ba2e2c6e13177a2e
- SHA512
  
  f348ea08916715dbaa4a58f37030f4bc76e96b25a2c59b75427aba57ecd9ffc6b06e9098573e20709fdecc9589b46134e3e39d63e7e28afccb678adae5ffeb4f
- SSDEEP
  
  3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8dh1j:o68i3odBiTl2+TCU/s1j
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2