67c8b5a897204c3dcfa3b9dacc4865162527dda6d225691127cef51e90a5dd4e | Triage

Sharing

General

Target

1e77650ea91205dcd2d619c2fc25b6d7
Size

160KB
Sample

231230-2d749scceq
MD5

1e77650ea91205dcd2d619c2fc25b6d7
SHA1

338670a948f679fca13c4833657e2aab1e77d1db
SHA256

67c8b5a897204c3dcfa3b9dacc4865162527dda6d225691127cef51e90a5dd4e
SHA512

06950493dff00f46216ac1c54c7647558de6b025d42d51dc9eaff880e77b1233bdd019c57c0e10f4d0a3cca259e89d45aa344958c9fde364b65f00c5a080def2
SSDEEP

1536:7Wge/zpI/Kf5U3AUmhw67lXpES1TWge/zpI/Kf5U3AUmhw67lXpES1v9w:0pAeW3ABhw69ui8pAeW3ABhw69uiv9w

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  1e77650ea91205dcd2d619c2fc25b6d7
- Size
  
  160KB
- MD5
  
  1e77650ea91205dcd2d619c2fc25b6d7
- SHA1
  
  338670a948f679fca13c4833657e2aab1e77d1db
- SHA256
  
  67c8b5a897204c3dcfa3b9dacc4865162527dda6d225691127cef51e90a5dd4e
- SHA512
  
  06950493dff00f46216ac1c54c7647558de6b025d42d51dc9eaff880e77b1233bdd019c57c0e10f4d0a3cca259e89d45aa344958c9fde364b65f00c5a080def2
- SSDEEP
  
  1536:7Wge/zpI/Kf5U3AUmhw67lXpES1TWge/zpI/Kf5U3AUmhw67lXpES1v9w:0pAeW3ABhw69ui8pAeW3ABhw69uiv9w
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2