43fae6a60dffcc47045c6f132d41ec77db2134dc825c35d1bf3abeb7210226cd | Triage

Sharing

General

Target

43fae6a60dffcc47045c6f132d41ec77db2134dc825c35d1bf3abeb7210226cd
Size

5.0MB
Sample

240820-gnsr4szgmj
MD5

6d7b8f5bfd03d8fdacebd97ea437b559
SHA1

d7b3a1bcd0b1cda98805165e726cc8716d86c1f4
SHA256

43fae6a60dffcc47045c6f132d41ec77db2134dc825c35d1bf3abeb7210226cd
SHA512

12b15265295f1e7fbb4a1e75a43ac2fa9e988526724032fd20d2053ab47832488759b0be8e562be391ddecc2eab4d3ec98279e825e6cfcc73b356093a6a53ca6
SSDEEP

98304:NcFiJETrDllPOOCrbAyNa0hdvV8Y288tjxGjQ/cshPyBe+Rr0NuTBpVY:jJSDbPOEodvO88tjxGjQEsae+5ntY

Score

7^/10

defense_evasion discovery privilege_escalation

Malware Config

Targets

- Target
  
  43fae6a60dffcc47045c6f132d41ec77db2134dc825c35d1bf3abeb7210226cd
- Size
  
  5.0MB
- MD5
  
  6d7b8f5bfd03d8fdacebd97ea437b559
- SHA1
  
  d7b3a1bcd0b1cda98805165e726cc8716d86c1f4
- SHA256
  
  43fae6a60dffcc47045c6f132d41ec77db2134dc825c35d1bf3abeb7210226cd
- SHA512
  
  12b15265295f1e7fbb4a1e75a43ac2fa9e988526724032fd20d2053ab47832488759b0be8e562be391ddecc2eab4d3ec98279e825e6cfcc73b356093a6a53ca6
- SSDEEP
  
  98304:NcFiJETrDllPOOCrbAyNa0hdvV8Y288tjxGjQ/cshPyBe+Rr0NuTBpVY:jJSDbPOEodvO88tjxGjQEsae+5ntY
Score

7^/10

defense_evasion discovery privilege_escalation
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Access Token Manipulation

Create Process with Token

Defense Evasion

Access Token Manipulation

Create Process with Token

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryprivilege_escalation

behavioral2

defense_evasiondiscoveryprivilege_escalation