5048265e4a59f36abcb393f088910efc6af8371518697c8254a007be5da38898 | Triage

Sharing

General

Target

5048265e4a59f36abcb393f088910efc6af8371518697c8254a007be5da38898
Size

137KB
Sample

240824-2f8tksvekm
MD5

1417e8e978b97be2383c82010bf7f9ad
SHA1

6d385e899ecca74c840f63447af5efea4ca95161
SHA256

5048265e4a59f36abcb393f088910efc6af8371518697c8254a007be5da38898
SHA512

91221acfb17323e8de3ff19452e5caf1a3c20018aad728316c2cabf75bc75a70ac6f74b470aa1b8b820a2c507fe80bd850184a828a02f9e2b89d5db487665b4c
SSDEEP

3072:/1i/NU8bOMYcYYcmy5d048g3nan3vx9kGSYng7+s5YmMOMYcYY51i/NU81:di/NjO5x0Xg+UGSYnuy3Oai/Nd

Score

8^/10

defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  5048265e4a59f36abcb393f088910efc6af8371518697c8254a007be5da38898
- Size
  
  137KB
- MD5
  
  1417e8e978b97be2383c82010bf7f9ad
- SHA1
  
  6d385e899ecca74c840f63447af5efea4ca95161
- SHA256
  
  5048265e4a59f36abcb393f088910efc6af8371518697c8254a007be5da38898
- SHA512
  
  91221acfb17323e8de3ff19452e5caf1a3c20018aad728316c2cabf75bc75a70ac6f74b470aa1b8b820a2c507fe80bd850184a828a02f9e2b89d5db487665b4c
- SSDEEP
  
  3072:/1i/NU8bOMYcYYcmy5d048g3nan3vx9kGSYng7+s5YmMOMYcYY51i/NU81:di/NjO5x0Xg+UGSYnuy3Oai/Nd
Score

8^/10

defense_evasion discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Drops file in System32 directory
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence