72b3420970e333b8b85395e05ddec33859fb4af13cf8c223dea462df9ea53553 | Triage

Sharing

General

Target

bee085e0c4f557c4dc7e3b82330d12c5
Size

390KB
Sample

240310-r53zhseh6y
MD5

bee085e0c4f557c4dc7e3b82330d12c5
SHA1

5989a51f7656f176747ff51402c2e52234a8d9b6
SHA256

72b3420970e333b8b85395e05ddec33859fb4af13cf8c223dea462df9ea53553
SHA512

85c4d03e810b535b478314564e9e99af74717e451e81be7029df421741228eb2c2e1a42977f7144d1e9f91c9298d027f2694d462f7e59b745493d38106055a2e
SSDEEP

6144:ui16CMveKPojilIk1XRghbzkK5U+eKHXi6oltNI8IG6SSeCKif6UWef3SOfsK/Zh:u5C/jk/ufkK5UcHboFcGjUWe/nZZPJ

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  bee085e0c4f557c4dc7e3b82330d12c5
- Size
  
  390KB
- MD5
  
  bee085e0c4f557c4dc7e3b82330d12c5
- SHA1
  
  5989a51f7656f176747ff51402c2e52234a8d9b6
- SHA256
  
  72b3420970e333b8b85395e05ddec33859fb4af13cf8c223dea462df9ea53553
- SHA512
  
  85c4d03e810b535b478314564e9e99af74717e451e81be7029df421741228eb2c2e1a42977f7144d1e9f91c9298d027f2694d462f7e59b745493d38106055a2e
- SSDEEP
  
  6144:ui16CMveKPojilIk1XRghbzkK5U+eKHXi6oltNI8IG6SSeCKif6UWef3SOfsK/Zh:u5C/jk/ufkK5UcHboFcGjUWe/nZZPJ
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2