7b180ed0d0201662ba56d0ba214a14cd44124e72d926ea9762355f4eba3d3a85 | Triage

Sharing

General

Target

604380fff2d54fb5b474cf5c6aa91eee.zip
Size

15KB
Sample

240903-zsby9swhrp
MD5

acb3b1d7f8532da56b877bb862645602
SHA1

8e0898878874537af13214bb49b5f7aaf358ec84
SHA256

7b180ed0d0201662ba56d0ba214a14cd44124e72d926ea9762355f4eba3d3a85
SHA512

40ad09983781edc8b33e3a51ddccd701d5f35134b44235b6822151120a340b9d17b103c23e3d7bda1b60ff0d133107406a4d88070b19d84ca8758691ca74bd47
SSDEEP

192:0uNbHnIrJ7t+S+ixDvTvsh4livdrL3VQzurq5oySUtYtG1MnkPlYf38doPlHC:0uRe+S1xTTkh4cXVRrqmTOYIxYfMslHC

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ef435776f8f7bef99e56c36c9335f4a7b368a04ae3d34e45b20c8f557b806894
- Size
  
  32KB
- MD5
  
  604380fff2d54fb5b474cf5c6aa91eee
- SHA1
  
  53e614c65a9d36fcd84f44d16d88f83f89ae0097
- SHA256
  
  ef435776f8f7bef99e56c36c9335f4a7b368a04ae3d34e45b20c8f557b806894
- SHA512
  
  23f0a6f260e91a78be7eb347f61fedfa024a58373b0e0f93b0ad5f61259dee4ee15ea2e01329a6d88680564bbe81eabdd26259ed5206b08f5bd6276aec7f1d30
- SSDEEP
  
  768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpq:OLsF2Kerc64sTiX2IV0Dhuq
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence