14dca83b7a5f054aff390a8ea4d35f6755ba252222652bfe7a55528dc3dffa0e | Triage

Sharing

General

Target

c3170780d6f454f311442abafb643bce
Size

38KB
Sample

240312-l4w7pagc37
MD5

c3170780d6f454f311442abafb643bce
SHA1

f95da66b2fe34aa87b75d5db380c9bd5512b040a
SHA256

14dca83b7a5f054aff390a8ea4d35f6755ba252222652bfe7a55528dc3dffa0e
SHA512

56b2a8d5eddaac089b05c702ebf8e4d2393cfe02594aa3b7835634f351d1e2bda44c930998d7e509deb0d6dc6709db07267034d95409654390b9781c988c85c1
SSDEEP

384:VLivlgxJv9BTd/HiWeze1x1MVbbuz+bv9etHBBjQ1f4U4PsUEIOcnlT+T02Plp/Z:1i81HzQe94bbuz+b00uU4EUER/dMWrs

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  c3170780d6f454f311442abafb643bce
- Size
  
  38KB
- MD5
  
  c3170780d6f454f311442abafb643bce
- SHA1
  
  f95da66b2fe34aa87b75d5db380c9bd5512b040a
- SHA256
  
  14dca83b7a5f054aff390a8ea4d35f6755ba252222652bfe7a55528dc3dffa0e
- SHA512
  
  56b2a8d5eddaac089b05c702ebf8e4d2393cfe02594aa3b7835634f351d1e2bda44c930998d7e509deb0d6dc6709db07267034d95409654390b9781c988c85c1
- SSDEEP
  
  384:VLivlgxJv9BTd/HiWeze1x1MVbbuz+bv9etHBBjQ1f4U4PsUEIOcnlT+T02Plp/Z:1i81HzQe94bbuz+b00uU4EUER/dMWrs
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence