60cba11aef72dd5f445f90673fafe42c748f8cce0770ea6dad0c57611986b61c | Triage

Sharing

General

Target

df859feda2e7af11ce9b81ecb9090691
Size

61KB
Sample

240326-s55zjsdd52
MD5

df859feda2e7af11ce9b81ecb9090691
SHA1

2cca84df83856523c36b8da73e5bac5bd147771d
SHA256

60cba11aef72dd5f445f90673fafe42c748f8cce0770ea6dad0c57611986b61c
SHA512

01abb312363d01ef4d1336fcc0b33dee8fb22e5610be4fd4e0d8e2b4045785ca7ffc545721d1989394cea13716530d08105734a09d1a1bcfce4be5b110ae986d
SSDEEP

1536:pA2yIzeIHTgI0Tv8Q5VnVQ2broOpgpi6FBej:uIzsITQ5VuKrnoFgj

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  df859feda2e7af11ce9b81ecb9090691
- Size
  
  61KB
- MD5
  
  df859feda2e7af11ce9b81ecb9090691
- SHA1
  
  2cca84df83856523c36b8da73e5bac5bd147771d
- SHA256
  
  60cba11aef72dd5f445f90673fafe42c748f8cce0770ea6dad0c57611986b61c
- SHA512
  
  01abb312363d01ef4d1336fcc0b33dee8fb22e5610be4fd4e0d8e2b4045785ca7ffc545721d1989394cea13716530d08105734a09d1a1bcfce4be5b110ae986d
- SSDEEP
  
  1536:pA2yIzeIHTgI0Tv8Q5VnVQ2broOpgpi6FBej:uIzsITQ5VuKrnoFgj
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2