285f3a4126e84a4bd565c69dcb0f89a8cbd4dbfa68d4796cbd459024d1562a11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca6771c797491861c1c98caae4189da7
Size

165KB
Sample

240315-ecbncaff3z
MD5

ca6771c797491861c1c98caae4189da7
SHA1

8c75fbde2b3cb70bb53f79dac78c8b0f6963c6c9
SHA256

285f3a4126e84a4bd565c69dcb0f89a8cbd4dbfa68d4796cbd459024d1562a11
SHA512

64714a233cb001bcc6034c6a3938b19ff154124b4179e84b6c0f98492c50d046735241d6e21240df3f39ca9f4fe43326fc31578744fc9720e5bd8e03f99e30d6
SSDEEP

3072:yTdljQQkuZtM3MGFw94BkjxATgbSAufTY0s218zCP52BOAh:lQDFiajaTMQrVsS1W

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  ca6771c797491861c1c98caae4189da7
- Size
  
  165KB
- MD5
  
  ca6771c797491861c1c98caae4189da7
- SHA1
  
  8c75fbde2b3cb70bb53f79dac78c8b0f6963c6c9
- SHA256
  
  285f3a4126e84a4bd565c69dcb0f89a8cbd4dbfa68d4796cbd459024d1562a11
- SHA512
  
  64714a233cb001bcc6034c6a3938b19ff154124b4179e84b6c0f98492c50d046735241d6e21240df3f39ca9f4fe43326fc31578744fc9720e5bd8e03f99e30d6
- SSDEEP
  
  3072:yTdljQQkuZtM3MGFw94BkjxATgbSAufTY0s218zCP52BOAh:lQDFiajaTMQrVsS1W
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2