464933113c5b2a8a8ec3c19ddb6be6cea6e8efafd67075ae881e6d478ae3a2f3 | Triage

Sharing

General

Target

a303ff13b2be33e15554361cfb382925
Size

204KB
Sample

240225-f8xfcscg59
MD5

a303ff13b2be33e15554361cfb382925
SHA1

125ff1c55270f96691c8a297e2c88688d9ed5315
SHA256

464933113c5b2a8a8ec3c19ddb6be6cea6e8efafd67075ae881e6d478ae3a2f3
SHA512

b96b11ec23a9299648319d5303e2ae2fdf3612b36f737b4d8cfb855db33b2ce33ba7484d6ba64aed7ac57c28848a774f080d79eb110a674a6cb09f650a6de66f
SSDEEP

6144:4mZK4SU7KFxV2j1nGpcXEq49BqkgxmU6BAdPwsXwYcAMaN:dZKe7KFxV2hOUUxi

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  a303ff13b2be33e15554361cfb382925
- Size
  
  204KB
- MD5
  
  a303ff13b2be33e15554361cfb382925
- SHA1
  
  125ff1c55270f96691c8a297e2c88688d9ed5315
- SHA256
  
  464933113c5b2a8a8ec3c19ddb6be6cea6e8efafd67075ae881e6d478ae3a2f3
- SHA512
  
  b96b11ec23a9299648319d5303e2ae2fdf3612b36f737b4d8cfb855db33b2ce33ba7484d6ba64aed7ac57c28848a774f080d79eb110a674a6cb09f650a6de66f
- SSDEEP
  
  6144:4mZK4SU7KFxV2j1nGpcXEq49BqkgxmU6BAdPwsXwYcAMaN:dZKe7KFxV2hOUUxi
Score

10^/10

evasion
- Modifies firewall policy service
  evasion
- Drops file in Drivers directory
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2