c46400e9c40c1a5e68fe2b148e716f09448ed0626072129db27e766192d33bb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b79514bd6363e670f982a9f55daa070N.exe
Size

179KB
Sample

240825-f4xwbsxamd
MD5

3b79514bd6363e670f982a9f55daa070
SHA1

1dc003d4c75e13ff325dee8161e97011792141a4
SHA256

c46400e9c40c1a5e68fe2b148e716f09448ed0626072129db27e766192d33bb9
SHA512

27c1d44fa34bd252fdf548d5f43640ba7cfb32ff94efd514a6d2b7e18e0049dd5db102bbb37154c73cc87961f98bcdec23e1840a0e09e1f01fe5580f54110bc6
SSDEEP

3072:DXTTASJKf2n5AxE2NpxOa2XdU2QF4s5XgIDFyHb8kHofL/09rGB:DvASJKenie2xT2NU2OTFQb8Fb0IB

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  3b79514bd6363e670f982a9f55daa070N.exe
- Size
  
  179KB
- MD5
  
  3b79514bd6363e670f982a9f55daa070
- SHA1
  
  1dc003d4c75e13ff325dee8161e97011792141a4
- SHA256
  
  c46400e9c40c1a5e68fe2b148e716f09448ed0626072129db27e766192d33bb9
- SHA512
  
  27c1d44fa34bd252fdf548d5f43640ba7cfb32ff94efd514a6d2b7e18e0049dd5db102bbb37154c73cc87961f98bcdec23e1840a0e09e1f01fe5580f54110bc6
- SSDEEP
  
  3072:DXTTASJKf2n5AxE2NpxOa2XdU2QF4s5XgIDFyHb8kHofL/09rGB:DvASJKenie2xT2NU2OTFQb8Fb0IB
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
- Checks for any installed AV software in registry
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Software Discovery

Security Software Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence