3a31624bcd1af1467397f53f5f1be4f8a79c76f3d9d06cc724baec89d82f7070 | Triage

Sharing

General

Target

3a31624bcd1af1467397f53f5f1be4f8a79c76f3d9d06cc724baec89d82f7070.exe
Size

16KB
Sample

240703-e5vxpa1gjk
MD5

95d30c4d06f0b31a7cd8336f1680f350
SHA1

814a8c767fb8b4d5eb4e75658d4d36013504af3b
SHA256

3a31624bcd1af1467397f53f5f1be4f8a79c76f3d9d06cc724baec89d82f7070
SHA512

f9144e4a9301f09b9bdade89cc3b321d67ef16216b2d16776a5fb896afea1aae6ac66dc5d13b421823dcd3ab98ca53808b33d85120110a9a5d038cb59537a65c
SSDEEP

192:GQOqjRFGKMh9ED/IDExeorm9+Dfp0GjW5sH2t3AIjvYabHa5tGr7:vdR8iQLoFx1jW5sIjvYR5tGX

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  3a31624bcd1af1467397f53f5f1be4f8a79c76f3d9d06cc724baec89d82f7070.exe
- Size
  
  16KB
- MD5
  
  95d30c4d06f0b31a7cd8336f1680f350
- SHA1
  
  814a8c767fb8b4d5eb4e75658d4d36013504af3b
- SHA256
  
  3a31624bcd1af1467397f53f5f1be4f8a79c76f3d9d06cc724baec89d82f7070
- SHA512
  
  f9144e4a9301f09b9bdade89cc3b321d67ef16216b2d16776a5fb896afea1aae6ac66dc5d13b421823dcd3ab98ca53808b33d85120110a9a5d038cb59537a65c
- SSDEEP
  
  192:GQOqjRFGKMh9ED/IDExeorm9+Dfp0GjW5sH2t3AIjvYabHa5tGr7:vdR8iQLoFx1jW5sIjvYR5tGX
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2