50ab4df7d9411160c2d865d393fe7ffefcb87d8989341cc4a6a538a3bef829e9 | Triage

Sharing

General

Target

e323c11ae0aff211f26acc3add9ad68f
Size

799KB
Sample

240409-zcc7dsdf9z
MD5

e323c11ae0aff211f26acc3add9ad68f
SHA1

393178ec692bff839190177e239c3048fb189fbd
SHA256

50ab4df7d9411160c2d865d393fe7ffefcb87d8989341cc4a6a538a3bef829e9
SHA512

0e1ef07a525c5885ea0c0c4e16a0567680c86a5a740ef35e571c4dca2929b64565c1fe2ee25dcc85acb01a0dbce1e325b0fb3c709f7050a68860933a5356c241
SSDEEP

12288:Wh3ZukLF5fRY5a/6GX4D1DwhHd1zre/9CL77EVMTe9jrsrXQuVz2c:WhMkxlRSaiPDi3qs3lTWYrX2c

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  e323c11ae0aff211f26acc3add9ad68f
- Size
  
  799KB
- MD5
  
  e323c11ae0aff211f26acc3add9ad68f
- SHA1
  
  393178ec692bff839190177e239c3048fb189fbd
- SHA256
  
  50ab4df7d9411160c2d865d393fe7ffefcb87d8989341cc4a6a538a3bef829e9
- SHA512
  
  0e1ef07a525c5885ea0c0c4e16a0567680c86a5a740ef35e571c4dca2929b64565c1fe2ee25dcc85acb01a0dbce1e325b0fb3c709f7050a68860933a5356c241
- SSDEEP
  
  12288:Wh3ZukLF5fRY5a/6GX4D1DwhHd1zre/9CL77EVMTe9jrsrXQuVz2c:WhMkxlRSaiPDi3qs3lTWYrX2c
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2