480f83695dd50d652910613f062a934c85a8ac9bae32bb542e60255e8e85128e | Triage

Sharing

General

Target

480f83695dd50d652910613f062a934c85a8ac9bae32bb542e60255e8e85128e.exe
Size

3.7MB
Sample

240710-t3fsbaxhqp
MD5

f3e1737d81c846aeffe6dc434ef1a70d
SHA1

6fb7d26916313e2264f6000b24159a684532ffa8
SHA256

480f83695dd50d652910613f062a934c85a8ac9bae32bb542e60255e8e85128e
SHA512

4f08d0f8be1ef3ce54c961532d7234d7301a25a28b3cb09ad29f6dc4c503946c1382c75ccb495722cd63bd7ffb365b758e1106504dbad71dc734d32e82ba90b1
SSDEEP

98304:AqwnqwaZHBYnxTE2nC21V1QkGSKRgRzzHxthjfdRVD:AqwnqwoBv2eVSKRKvj1bD

Score

8^/10

execution persistence

Malware Config

Targets

- Target
  
  480f83695dd50d652910613f062a934c85a8ac9bae32bb542e60255e8e85128e.exe
- Size
  
  3.7MB
- MD5
  
  f3e1737d81c846aeffe6dc434ef1a70d
- SHA1
  
  6fb7d26916313e2264f6000b24159a684532ffa8
- SHA256
  
  480f83695dd50d652910613f062a934c85a8ac9bae32bb542e60255e8e85128e
- SHA512
  
  4f08d0f8be1ef3ce54c961532d7234d7301a25a28b3cb09ad29f6dc4c503946c1382c75ccb495722cd63bd7ffb365b758e1106504dbad71dc734d32e82ba90b1
- SSDEEP
  
  98304:AqwnqwaZHBYnxTE2nC21V1QkGSKRgRzzHxthjfdRVD:AqwnqwoBv2eVSKRKvj1bD
Score

8^/10

execution persistence
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

executionpersistence