8935aeaa6ce0b0c2e2b23d656db28c652a486a312361c16cd9433bbd4422beb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

721bed33451a1978d387aff14a680aa0N.exe
Size

200KB
Sample

240904-2xrlmayakk
MD5

721bed33451a1978d387aff14a680aa0
SHA1

3ee1a5e3e2e4eb38940da7f3d6e92f014b94205a
SHA256

8935aeaa6ce0b0c2e2b23d656db28c652a486a312361c16cd9433bbd4422beb6
SHA512

07d57ee9f41d44a9dc653696fbdcbffd1be2e182e3a9064843304fa558a47ddbd60025cf8414e96d50dd928569ac852eee3fac445c7882c3c5c23a161314e655
SSDEEP

3072:jUDVZv0tQ9nLHbB9WHCS0AgTlhsp3mWRmQ:Yv4QxL7B9WHK9Jhsp3v1

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  721bed33451a1978d387aff14a680aa0N.exe
- Size
  
  200KB
- MD5
  
  721bed33451a1978d387aff14a680aa0
- SHA1
  
  3ee1a5e3e2e4eb38940da7f3d6e92f014b94205a
- SHA256
  
  8935aeaa6ce0b0c2e2b23d656db28c652a486a312361c16cd9433bbd4422beb6
- SHA512
  
  07d57ee9f41d44a9dc653696fbdcbffd1be2e182e3a9064843304fa558a47ddbd60025cf8414e96d50dd928569ac852eee3fac445c7882c3c5c23a161314e655
- SSDEEP
  
  3072:jUDVZv0tQ9nLHbB9WHCS0AgTlhsp3mWRmQ:Yv4QxL7B9WHK9Jhsp3v1
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence