cccd43266e5329ce0221e7b8685d84abf99e5f8bfb6e2c182536f073bf7c89ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fdd46ba7fe5c0f6ebabc2761ee02e10N.exe
Size

365KB
Sample

240822-3st2mawfqj
MD5

0fdd46ba7fe5c0f6ebabc2761ee02e10
SHA1

350b564f797fcdbdcbcb466a2d08eaf975530aa9
SHA256

cccd43266e5329ce0221e7b8685d84abf99e5f8bfb6e2c182536f073bf7c89ea
SHA512

80da678697eeb60dffb2100d360a768f56b6ebcf3b40c6adb84cd986d33296321dcd1561a3fa6763ba02d9fcde61e4ea6ad5bd16adab6850f2d33d3521eb0d1c
SSDEEP

6144:pYFoSUDxyFkhKSZI4zLVSVp3ys9ceiItgA5Snj:aeJVWcKSZhnVep3ys37tgA4

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  0fdd46ba7fe5c0f6ebabc2761ee02e10N.exe
- Size
  
  365KB
- MD5
  
  0fdd46ba7fe5c0f6ebabc2761ee02e10
- SHA1
  
  350b564f797fcdbdcbcb466a2d08eaf975530aa9
- SHA256
  
  cccd43266e5329ce0221e7b8685d84abf99e5f8bfb6e2c182536f073bf7c89ea
- SHA512
  
  80da678697eeb60dffb2100d360a768f56b6ebcf3b40c6adb84cd986d33296321dcd1561a3fa6763ba02d9fcde61e4ea6ad5bd16adab6850f2d33d3521eb0d1c
- SSDEEP
  
  6144:pYFoSUDxyFkhKSZI4zLVSVp3ys9ceiItgA5Snj:aeJVWcKSZhnVep3ys37tgA4
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery