8f1dc932bbb4e773f185962f8a2c83ae83392fe61062228c9fec815df2cf8887 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b5932c732c5d98034186dac65214a75
Size

96KB
Sample

240108-nx33rshagr
MD5

4b5932c732c5d98034186dac65214a75
SHA1

f74d76d4a1c5926c27e6853cdb947b4fedb9543f
SHA256

8f1dc932bbb4e773f185962f8a2c83ae83392fe61062228c9fec815df2cf8887
SHA512

d36f2b790ceb12b9a668161399e29f42eae5d33655133c8e541c08cb7823b3221dc4d23374a4b93b7479d0af79d688795b202f0ef933a5afa71c2d7bcf601b58
SSDEEP

1536:igYPhQXwIiPrrjThO+lUBrzCxry1ec7rUyj239au7538iJkZgyfJ:FYP2XerzhOUxu/XUtauF8iJkZg0

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  4b5932c732c5d98034186dac65214a75
- Size
  
  96KB
- MD5
  
  4b5932c732c5d98034186dac65214a75
- SHA1
  
  f74d76d4a1c5926c27e6853cdb947b4fedb9543f
- SHA256
  
  8f1dc932bbb4e773f185962f8a2c83ae83392fe61062228c9fec815df2cf8887
- SHA512
  
  d36f2b790ceb12b9a668161399e29f42eae5d33655133c8e541c08cb7823b3221dc4d23374a4b93b7479d0af79d688795b202f0ef933a5afa71c2d7bcf601b58
- SSDEEP
  
  1536:igYPhQXwIiPrrjThO+lUBrzCxry1ec7rUyj239au7538iJkZgyfJ:FYP2XerzhOUxu/XUtauF8iJkZg0
Score

8^/10

evasion persistence
- Creates new service(s)
  persistence
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence