87d19e3bff436f6d204095917f7a2b1dd58d093d637b8cc0a6aa38b761832241 | Triage

Sharing

General

Target

8ae7bb9d6119c991386fa9ed8149c33e
Size

54KB
Sample

240203-alpjcaceb2
MD5

8ae7bb9d6119c991386fa9ed8149c33e
SHA1

2647ea011d14a51443c4e83c85e64124ab166d31
SHA256

87d19e3bff436f6d204095917f7a2b1dd58d093d637b8cc0a6aa38b761832241
SHA512

5239f922e773828896c6bfb98ec0cf1bc9688eadb3e858fa27cb71ed2f691d5e0ada63b8b14ab65139046d887d168f540e8062ff9fdea562cb0db980fc656a21
SSDEEP

1536:ts+Zgajv3kHK35Y0RKsZ1Ls3JcBHHx/KboFwbQp8X:tFC4kq35Yds/Ls3JcBnAFby8

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  8ae7bb9d6119c991386fa9ed8149c33e
- Size
  
  54KB
- MD5
  
  8ae7bb9d6119c991386fa9ed8149c33e
- SHA1
  
  2647ea011d14a51443c4e83c85e64124ab166d31
- SHA256
  
  87d19e3bff436f6d204095917f7a2b1dd58d093d637b8cc0a6aa38b761832241
- SHA512
  
  5239f922e773828896c6bfb98ec0cf1bc9688eadb3e858fa27cb71ed2f691d5e0ada63b8b14ab65139046d887d168f540e8062ff9fdea562cb0db980fc656a21
- SSDEEP
  
  1536:ts+Zgajv3kHK35Y0RKsZ1Ls3JcBHHx/KboFwbQp8X:tFC4kq35Yds/Ls3JcBnAFby8
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2