863aa5c5903b8a6c48e38b91a5047a069dfa0121b232b55ae53565580a27e93d | Triage

Sharing

General

Target

5bed002693c8d51253162b847dcb52b9
Size

860KB
Sample

240115-c7qpmsggf3
MD5

5bed002693c8d51253162b847dcb52b9
SHA1

54a4b4a01858d13722c1813cd146c92936bde327
SHA256

863aa5c5903b8a6c48e38b91a5047a069dfa0121b232b55ae53565580a27e93d
SHA512

0420fc446fc72451ed180a9afc7d58c43f71d1667c7c1607c220500d0035f23a1f36d38e5c46573e6c2e3cb841fb419a003994a84ba6d60cba6afc7372b18eea
SSDEEP

24576:b1VUfLibdQTQzbQNxAdBbklQzqPE+k/SSsmwD7:BeTi6svQN6T4VEXKShQ7

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  5bed002693c8d51253162b847dcb52b9
- Size
  
  860KB
- MD5
  
  5bed002693c8d51253162b847dcb52b9
- SHA1
  
  54a4b4a01858d13722c1813cd146c92936bde327
- SHA256
  
  863aa5c5903b8a6c48e38b91a5047a069dfa0121b232b55ae53565580a27e93d
- SHA512
  
  0420fc446fc72451ed180a9afc7d58c43f71d1667c7c1607c220500d0035f23a1f36d38e5c46573e6c2e3cb841fb419a003994a84ba6d60cba6afc7372b18eea
- SSDEEP
  
  24576:b1VUfLibdQTQzbQNxAdBbklQzqPE+k/SSsmwD7:BeTi6svQN6T4VEXKShQ7
Score

8^/10

persistence
- Creates new service(s)
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2