7101f3ab6b78d5a1f726cfb7bc0a1bd591322697369fd02bf5ca7b77fabd3248 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7101f3ab6b78d5a1f726cfb7bc0a1bd591322697369fd02bf5ca7b77fabd3248
Size

701KB
Sample

240127-zbj9baddbl
MD5

837a0e0956d0ce9f8887360c6a3e172a
SHA1

09c853ec49d173f2fc7d2eee329666a84fb389c9
SHA256

7101f3ab6b78d5a1f726cfb7bc0a1bd591322697369fd02bf5ca7b77fabd3248
SHA512

945fa409ed2a437182ede819f1c86402e60ce0ae1f79536ee3b03eee49973f4c4cd01e7f9a42ded600ed65bdb3c609901d8b3a70167e9b64aafb19f22824754a
SSDEEP

12288:CGHCnaomAEg3uPdkgRZhxi6SMyF7AlOPSN6TsLjjONDDkP+6M0nwb:CGHCm8uPdJvhwlLF7Al9esfeDDZ6XA

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  7101f3ab6b78d5a1f726cfb7bc0a1bd591322697369fd02bf5ca7b77fabd3248
- Size
  
  701KB
- MD5
  
  837a0e0956d0ce9f8887360c6a3e172a
- SHA1
  
  09c853ec49d173f2fc7d2eee329666a84fb389c9
- SHA256
  
  7101f3ab6b78d5a1f726cfb7bc0a1bd591322697369fd02bf5ca7b77fabd3248
- SHA512
  
  945fa409ed2a437182ede819f1c86402e60ce0ae1f79536ee3b03eee49973f4c4cd01e7f9a42ded600ed65bdb3c609901d8b3a70167e9b64aafb19f22824754a
- SSDEEP
  
  12288:CGHCnaomAEg3uPdkgRZhxi6SMyF7AlOPSN6TsLjjONDDkP+6M0nwb:CGHCm8uPdJvhwlLF7Al9esfeDDZ6XA
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2