8932d83ffb392d3bf4e51574eced9981e9d967dfb66c04fab4612873ec6f675d | Triage

Sharing

General

Target

efd5144d7b56934512c0c20e89081490N.exe
Size

1.0MB
Sample

240905-ctltja1ern
MD5

efd5144d7b56934512c0c20e89081490
SHA1

dba2110d6a76a323673728503db5c592f559528e
SHA256

8932d83ffb392d3bf4e51574eced9981e9d967dfb66c04fab4612873ec6f675d
SHA512

470b16e0751b7648acab0cb358b44ff18106d02452a10d91754cb2c4a236f421de5e6c89927be4856abe8693e56a4a983240da61322fa6bafb18621b9ae29499
SSDEEP

24576:StE7Ray4YGUyj2LYeutpPIp9Ucv9nrzUKlpE/GYQUmc:cYwRY7e2hutpP7cvRvXlpKGtUmc

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  efd5144d7b56934512c0c20e89081490N.exe
- Size
  
  1.0MB
- MD5
  
  efd5144d7b56934512c0c20e89081490
- SHA1
  
  dba2110d6a76a323673728503db5c592f559528e
- SHA256
  
  8932d83ffb392d3bf4e51574eced9981e9d967dfb66c04fab4612873ec6f675d
- SHA512
  
  470b16e0751b7648acab0cb358b44ff18106d02452a10d91754cb2c4a236f421de5e6c89927be4856abe8693e56a4a983240da61322fa6bafb18621b9ae29499
- SSDEEP
  
  24576:StE7Ray4YGUyj2LYeutpPIp9Ucv9nrzUKlpE/GYQUmc:cYwRY7e2hutpP7cvRvXlpKGtUmc
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence