General
-
Target
5b85836c75d1dacf71227436b2d6102ec84dd91ab12b727c3c4643e27b724ea2
-
Size
39.4MB
-
Sample
240522-2kl6dabf3t
-
MD5
68d40dbffd9df1989a6ef532d88a9d85
-
SHA1
2dc45ca131d13be4c74b34ceedf2a21b37fb91f6
-
SHA256
5b85836c75d1dacf71227436b2d6102ec84dd91ab12b727c3c4643e27b724ea2
-
SHA512
e98ef299f29a34903e5ae2f041fed3d694084f813e333e5ed61cf50e8f5958474dc39e46afedf6d212566bdba2f06701f74121c342d6b19d1419108de3f93dc1
-
SSDEEP
786432:Ckxc4BiiqqeuC9H607Yd0FPAwt3f3DXXo1wg+37TLYVzvWVHC:Csdqqez9H7wWPRt3f3bXo1wNw
Static task
static1
Behavioral task
behavioral1
Sample
5b85836c75d1dacf71227436b2d6102ec84dd91ab12b727c3c4643e27b724ea2.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5b85836c75d1dacf71227436b2d6102ec84dd91ab12b727c3c4643e27b724ea2.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
5b85836c75d1dacf71227436b2d6102ec84dd91ab12b727c3c4643e27b724ea2
-
Size
39.4MB
-
MD5
68d40dbffd9df1989a6ef532d88a9d85
-
SHA1
2dc45ca131d13be4c74b34ceedf2a21b37fb91f6
-
SHA256
5b85836c75d1dacf71227436b2d6102ec84dd91ab12b727c3c4643e27b724ea2
-
SHA512
e98ef299f29a34903e5ae2f041fed3d694084f813e333e5ed61cf50e8f5958474dc39e46afedf6d212566bdba2f06701f74121c342d6b19d1419108de3f93dc1
-
SSDEEP
786432:Ckxc4BiiqqeuC9H607Yd0FPAwt3f3DXXo1wg+37TLYVzvWVHC:Csdqqez9H7wWPRt3f3bXo1wNw
Score10/10-
Modifies firewall policy service
-
Drops startup file
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
2Windows Service
2Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Browser Extensions
1Privilege Escalation
Create or Modify System Process
2Windows Service
2Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Defense Evasion
Modify Registry
5Impair Defenses
1Disable or Modify System Firewall
1Subvert Trust Controls
1Install Root Certificate
1