2090d63e62edd2776154e999ca80010e5258c6a2337d4142d563ad2e52fa32db | Triage

Sharing

General

Target

be3c24755243df82d3f1cc1ed1bd3d70N.exe
Size

408KB
Sample

240726-l5pt1avanc
MD5

be3c24755243df82d3f1cc1ed1bd3d70
SHA1

a8c799ab3e7979672b199900b14ac7a960bf14b3
SHA256

2090d63e62edd2776154e999ca80010e5258c6a2337d4142d563ad2e52fa32db
SHA512

3eff60720d18e248d53e63258275e3f297ffc33509f3998fc72c2d8e39a5756769031e8876e6e0a150abadb71444b3d9cb55980bb9b08f22e7c9ce844ae3ef46
SSDEEP

6144:Dck18MipfIUaQYu8tbS6JBcj0U5hjX/Tvf8MjKFW8jb/HVbdsifRe9+fHrGJH:DX8Djadu8J4YSjX/THKxr1bBGsHrGJH

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  be3c24755243df82d3f1cc1ed1bd3d70N.exe
- Size
  
  408KB
- MD5
  
  be3c24755243df82d3f1cc1ed1bd3d70
- SHA1
  
  a8c799ab3e7979672b199900b14ac7a960bf14b3
- SHA256
  
  2090d63e62edd2776154e999ca80010e5258c6a2337d4142d563ad2e52fa32db
- SHA512
  
  3eff60720d18e248d53e63258275e3f297ffc33509f3998fc72c2d8e39a5756769031e8876e6e0a150abadb71444b3d9cb55980bb9b08f22e7c9ce844ae3ef46
- SSDEEP
  
  6144:Dck18MipfIUaQYu8tbS6JBcj0U5hjX/Tvf8MjKFW8jb/HVbdsifRe9+fHrGJH:DX8Djadu8J4YSjX/THKxr1bBGsHrGJH
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
- Checks for any installed AV software in registry
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Software Discovery

Security Software Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence