721627b319a98e2a7f9438853afc1fb7b3796a4d273fbfc7ab7c2a0f6eb076f2 | Triage

Sharing

General

Target

721627b319a98e2a7f9438853afc1fb7b3796a4d273fbfc7ab7c2a0f6eb076f2
Size

13.0MB
Sample

240328-ek9kcaea51
MD5

ab867a18005dc503aafb28c3384527af
SHA1

e0a2bebd52de5d1c648018b2f50b21782e04c6b2
SHA256

721627b319a98e2a7f9438853afc1fb7b3796a4d273fbfc7ab7c2a0f6eb076f2
SHA512

dc8a509446ea0c3b7e9a28778d88605be2132f9f91de06b04848945d0f61e7e8d9b0fd04b03f036ee50336e03ea3f4c0d5f2df5c1c8e235aeaf4fc81bc12b4d3
SSDEEP

393216:ncLqnPOFgFmJmFKe+Gqida3lo6xeReTSjtcmM:cGPKRTGqiOxweT2tvM

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  721627b319a98e2a7f9438853afc1fb7b3796a4d273fbfc7ab7c2a0f6eb076f2
- Size
  
  13.0MB
- MD5
  
  ab867a18005dc503aafb28c3384527af
- SHA1
  
  e0a2bebd52de5d1c648018b2f50b21782e04c6b2
- SHA256
  
  721627b319a98e2a7f9438853afc1fb7b3796a4d273fbfc7ab7c2a0f6eb076f2
- SHA512
  
  dc8a509446ea0c3b7e9a28778d88605be2132f9f91de06b04848945d0f61e7e8d9b0fd04b03f036ee50336e03ea3f4c0d5f2df5c1c8e235aeaf4fc81bc12b4d3
- SSDEEP
  
  393216:ncLqnPOFgFmJmFKe+Gqida3lo6xeReTSjtcmM:cGPKRTGqiOxweT2tvM
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence