5d7126542a243da0fe38e735b6eddf54ee9e4ad115cb6e2c6d719f521d4f7fe4 | Triage

Sharing

General

Target

5d7126542a243da0fe38e735b6eddf54ee9e4ad115cb6e2c6d719f521d4f7fe4
Size

82KB
Sample

240808-1qgmeazgqr
MD5

df2f557d7506a3fd31b738aa4ed06ed8
SHA1

18e151e55b9b68f3f18786ba0fbd6bfbfb6b544e
SHA256

5d7126542a243da0fe38e735b6eddf54ee9e4ad115cb6e2c6d719f521d4f7fe4
SHA512

d7cb932660b009765eab27fae1d41faa8a0822fcecd848caace6514a76cc1d1d2aadfbcd57f0d1c0074107dc27f9c157a1b6149535a4188558b0877b6eb5a7f8
SSDEEP

1536:JwesrabTugN3cQb/+HUurgh7U9bF4a14d0BSnOAB6b:PbTTsQb/Ur0U9bFN4duyON

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  5d7126542a243da0fe38e735b6eddf54ee9e4ad115cb6e2c6d719f521d4f7fe4
- Size
  
  82KB
- MD5
  
  df2f557d7506a3fd31b738aa4ed06ed8
- SHA1
  
  18e151e55b9b68f3f18786ba0fbd6bfbfb6b544e
- SHA256
  
  5d7126542a243da0fe38e735b6eddf54ee9e4ad115cb6e2c6d719f521d4f7fe4
- SHA512
  
  d7cb932660b009765eab27fae1d41faa8a0822fcecd848caace6514a76cc1d1d2aadfbcd57f0d1c0074107dc27f9c157a1b6149535a4188558b0877b6eb5a7f8
- SSDEEP
  
  1536:JwesrabTugN3cQb/+HUurgh7U9bF4a14d0BSnOAB6b:PbTTsQb/Ur0U9bFN4duyON
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2