d86eaf1458e89181096e25a59adb5d66f729456c92f1d2776a37d1348ff4d7df | Triage

Sharing

General

Target

d86eaf1458e89181096e25a59adb5d66f729456c92f1d2776a37d1348ff4d7df
Size

442KB
Sample

240625-dm938a1bqp
MD5

971cc417d01ac73857e1e67e9ce72472
SHA1

bfc3efb91ccca7340bd52592f04d6c2a90548dd0
SHA256

d86eaf1458e89181096e25a59adb5d66f729456c92f1d2776a37d1348ff4d7df
SHA512

d25879e48fde5b6904182049bbb7e34932ffb8ff0750d7a1d00368ab1263bcf049f7bd4d2dc16a5e54817489b394c50ff4fac51682a727f93447aa0125ded835
SSDEEP

6144:caQbbFhjLoqmVtrKA2S7uacrEPy08xnAjQrZL9D1U9nKm1i9UxQhmOFv7iqVaYqj:cTxcfNzPypZZD1U9KaanJCx+uDk+

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  d86eaf1458e89181096e25a59adb5d66f729456c92f1d2776a37d1348ff4d7df
- Size
  
  442KB
- MD5
  
  971cc417d01ac73857e1e67e9ce72472
- SHA1
  
  bfc3efb91ccca7340bd52592f04d6c2a90548dd0
- SHA256
  
  d86eaf1458e89181096e25a59adb5d66f729456c92f1d2776a37d1348ff4d7df
- SHA512
  
  d25879e48fde5b6904182049bbb7e34932ffb8ff0750d7a1d00368ab1263bcf049f7bd4d2dc16a5e54817489b394c50ff4fac51682a727f93447aa0125ded835
- SSDEEP
  
  6144:caQbbFhjLoqmVtrKA2S7uacrEPy08xnAjQrZL9D1U9nKm1i9UxQhmOFv7iqVaYqj:cTxcfNzPypZZD1U9KaanJCx+uDk+
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2