d7d8f2deec73d6b37266337ef251366f76e2516542bfc5eb87f10dab57a4c2e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7d8f2deec73d6b37266337ef251366f76e2516542bfc5eb87f10dab57a4c2e4
Size

5.1MB
Sample

240604-ecx7cacg47
MD5

51d6198c8c30d025808088c8a1f71acd
SHA1

f0aee752affabfb1986b70d2ef610d20bd4f63ad
SHA256

d7d8f2deec73d6b37266337ef251366f76e2516542bfc5eb87f10dab57a4c2e4
SHA512

6fff36e68408482ec66352412bd034e978035292e98db4a091f060476109a3620c3e33de23c6d4b8ac06f510ef1b96c1272e00f875dff91f0beb5df8280476f3
SSDEEP

98304:0nsmtk2ay+YgLdm96Wzeg+eWbVMATRzhfZ+IZ/ij5UdY1j2YLhkZ1LhkEoM2YFi5:aLz+NLQZabnpZ+IZXojoIFLOyomFHKnK

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  d7d8f2deec73d6b37266337ef251366f76e2516542bfc5eb87f10dab57a4c2e4
- Size
  
  5.1MB
- MD5
  
  51d6198c8c30d025808088c8a1f71acd
- SHA1
  
  f0aee752affabfb1986b70d2ef610d20bd4f63ad
- SHA256
  
  d7d8f2deec73d6b37266337ef251366f76e2516542bfc5eb87f10dab57a4c2e4
- SHA512
  
  6fff36e68408482ec66352412bd034e978035292e98db4a091f060476109a3620c3e33de23c6d4b8ac06f510ef1b96c1272e00f875dff91f0beb5df8280476f3
- SSDEEP
  
  98304:0nsmtk2ay+YgLdm96Wzeg+eWbVMATRzhfZ+IZ/ij5UdY1j2YLhkZ1LhkEoM2YFi5:aLz+NLQZabnpZ+IZXojoIFLOyomFHKnK
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2