5b068402c30db67a56a03d9c80546c565da45a5973f147f6b19aa23342c809eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b068402c30db67a56a03d9c80546c565da45a5973f147f6b19aa23342c809eb
Size

85KB
Sample

240705-1x1zmaxarr
MD5

ffaf45b51f6880d6c1d49470f561e06b
SHA1

ca2091db287f99428733d716680e7f637d1462d4
SHA256

5b068402c30db67a56a03d9c80546c565da45a5973f147f6b19aa23342c809eb
SHA512

e4e700630adf1accc420c160c4509625e8159a11c4836da138395772731b2c211c9ce3401bca67d4a0b7ed1f22bf88723f2f7f61251f9a200798b586f8e6b6fc
SSDEEP

1536:D00URPnKfZrT2DawRR8JfP3zZB355B/CYTjipvF2a:D00URSfsGyR+ZB355BqYvQd2a

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  5b068402c30db67a56a03d9c80546c565da45a5973f147f6b19aa23342c809eb
- Size
  
  85KB
- MD5
  
  ffaf45b51f6880d6c1d49470f561e06b
- SHA1
  
  ca2091db287f99428733d716680e7f637d1462d4
- SHA256
  
  5b068402c30db67a56a03d9c80546c565da45a5973f147f6b19aa23342c809eb
- SHA512
  
  e4e700630adf1accc420c160c4509625e8159a11c4836da138395772731b2c211c9ce3401bca67d4a0b7ed1f22bf88723f2f7f61251f9a200798b586f8e6b6fc
- SSDEEP
  
  1536:D00URPnKfZrT2DawRR8JfP3zZB355B/CYTjipvF2a:D00URSfsGyR+ZB355BqYvQd2a
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2