b8def34fea92531627b7fa57918e53cb6f8823e4829deb97663a946f83372884 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8def34fea92531627b7fa57918e53cb6f8823e4829deb97663a946f83372884
Size

464KB
Sample

240329-b13vyseb2z
MD5

a4bbd937328a0f7e2710187a61542cc1
SHA1

ea478b5fb6d88e14cdc404317a6db0f518cc58b8
SHA256

b8def34fea92531627b7fa57918e53cb6f8823e4829deb97663a946f83372884
SHA512

a8750b7b5aab7e144f3317ad6db27d7aa9472f783dcc398eab2c665bec1a5e68c0bc3d1fb5247977035ff9b6337c39b05a1f03916176064388dd525bea581edb
SSDEEP

6144:WZT3H5umWrA7oSLvd5Gr83KS1PCG0LcMFM/2dsc0YQ9X43UWIp4XFJ4U3hHMHiF1:Wh3ZukLF5fRY5a/6GX4C4frUSASCzNmV

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  b8def34fea92531627b7fa57918e53cb6f8823e4829deb97663a946f83372884
- Size
  
  464KB
- MD5
  
  a4bbd937328a0f7e2710187a61542cc1
- SHA1
  
  ea478b5fb6d88e14cdc404317a6db0f518cc58b8
- SHA256
  
  b8def34fea92531627b7fa57918e53cb6f8823e4829deb97663a946f83372884
- SHA512
  
  a8750b7b5aab7e144f3317ad6db27d7aa9472f783dcc398eab2c665bec1a5e68c0bc3d1fb5247977035ff9b6337c39b05a1f03916176064388dd525bea581edb
- SSDEEP
  
  6144:WZT3H5umWrA7oSLvd5Gr83KS1PCG0LcMFM/2dsc0YQ9X43UWIp4XFJ4U3hHMHiF1:Wh3ZukLF5fRY5a/6GX4C4frUSASCzNmV
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2