323a5dcb85584db08239b6005233aa0dc45120297976bce11c9c3d3369b41805 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d607a936aadee27e925b98c7aa3761df
Size

15KB
Sample

240319-nw3qlsbc42
MD5

d607a936aadee27e925b98c7aa3761df
SHA1

a0dc8e928e654e381a06682a9a8e5815e91eb3b4
SHA256

323a5dcb85584db08239b6005233aa0dc45120297976bce11c9c3d3369b41805
SHA512

7d54a068f8403435b601610112d8eb6c7516e6f4bc2f5962cd8c9a57b76ce0fb17f46817392d20b604b6aec13ecd37f7efc9da2e24c523192c1cfcb81aab03c9
SSDEEP

384:oHpTYD2/+MxOTrLapEwfOhbmSCAQdAIl9Gx8aJZLB6:cTX/+Mx2ipXBSCPdfrMtr

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  d607a936aadee27e925b98c7aa3761df
- Size
  
  15KB
- MD5
  
  d607a936aadee27e925b98c7aa3761df
- SHA1
  
  a0dc8e928e654e381a06682a9a8e5815e91eb3b4
- SHA256
  
  323a5dcb85584db08239b6005233aa0dc45120297976bce11c9c3d3369b41805
- SHA512
  
  7d54a068f8403435b601610112d8eb6c7516e6f4bc2f5962cd8c9a57b76ce0fb17f46817392d20b604b6aec13ecd37f7efc9da2e24c523192c1cfcb81aab03c9
- SSDEEP
  
  384:oHpTYD2/+MxOTrLapEwfOhbmSCAQdAIl9Gx8aJZLB6:cTX/+Mx2ipXBSCPdfrMtr
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2