c469e0e2c6153f7235f86c6f1a7dc8bc530a29587014e7ff0b37384b1504bf81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a725351460bfcf4cf682b4b24d8d94b0N.exe
Size

74KB
Sample

240722-njspwawcnq
MD5

a725351460bfcf4cf682b4b24d8d94b0
SHA1

b506986ba5fb54cd7bcb09e6da71c6351524f7ec
SHA256

c469e0e2c6153f7235f86c6f1a7dc8bc530a29587014e7ff0b37384b1504bf81
SHA512

56fa16424eec3d0c693eb071f3d7836f4211fac48c2aefd08c2abb44f1c560b1d41e184676dd506fbb48f035b684688b0634dd85c489283bf7f4e3bbe2d50864
SSDEEP

768:OrItKyw5WHXfQmjIiIk9ecAakMb96ZyXuDLdibfffsffff2ZZZZnAAAw:Or3Z5IfQmv81abyyXcZibfffsffffI

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  a725351460bfcf4cf682b4b24d8d94b0N.exe
- Size
  
  74KB
- MD5
  
  a725351460bfcf4cf682b4b24d8d94b0
- SHA1
  
  b506986ba5fb54cd7bcb09e6da71c6351524f7ec
- SHA256
  
  c469e0e2c6153f7235f86c6f1a7dc8bc530a29587014e7ff0b37384b1504bf81
- SHA512
  
  56fa16424eec3d0c693eb071f3d7836f4211fac48c2aefd08c2abb44f1c560b1d41e184676dd506fbb48f035b684688b0634dd85c489283bf7f4e3bbe2d50864
- SSDEEP
  
  768:OrItKyw5WHXfQmjIiIk9ecAakMb96ZyXuDLdibfffsffff2ZZZZnAAAw:Or3Z5IfQmv81abyyXcZibfffsffffI
Score

8^/10

evasion
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2