1167e1bc02116d970fc0507496cc176325278bdd4c61a673d1da3349870c0adc | Triage

Resubmissions

06-08-2024 09:48

240806-ls68hswcqr 7

Sharing

General

Target

8f507d0fd5aca01dc96893901cf35a00N.exe
Size

11KB
Sample

240806-ls68hswcqr
MD5

8f507d0fd5aca01dc96893901cf35a00
SHA1

4a97ffae3d9cc27bfe5c6a180dba3232ea2932de
SHA256

1167e1bc02116d970fc0507496cc176325278bdd4c61a673d1da3349870c0adc
SHA512

869f408926dc910a688f4cab5d9b624d409c5ce23cbab21dad60c7cfc4786320c7404efada427e24216ea3769cd09feff7dde9bc4ac95ecd4a1162ee0e89ef60
SSDEEP

192:Zg6eHLE5KxkDpnqKjIdtaCRYvRtCk1rE1Ty68A3CuYYpZ7E:G6eHIAx0pqNgHvRtoyhASuYYpZ7E

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  8f507d0fd5aca01dc96893901cf35a00N.exe
- Size
  
  11KB
- MD5
  
  8f507d0fd5aca01dc96893901cf35a00
- SHA1
  
  4a97ffae3d9cc27bfe5c6a180dba3232ea2932de
- SHA256
  
  1167e1bc02116d970fc0507496cc176325278bdd4c61a673d1da3349870c0adc
- SHA512
  
  869f408926dc910a688f4cab5d9b624d409c5ce23cbab21dad60c7cfc4786320c7404efada427e24216ea3769cd09feff7dde9bc4ac95ecd4a1162ee0e89ef60
- SSDEEP
  
  192:Zg6eHLE5KxkDpnqKjIdtaCRYvRtCk1rE1Ty68A3CuYYpZ7E:G6eHIAx0pqNgHvRtoyhASuYYpZ7E
Score

7^/10

discovery evasion persistence trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoverypersistence