General
-
Target
52b398e913cbcdc27ee1e457c2d065ba1b626da70c71dd6af36ac77cc0c3d688
-
Size
84KB
-
Sample
240905-prezes1gqg
-
MD5
9f8f47265c5ced444406f6fce24064d0
-
SHA1
da2578a5d80b9e1f38ec59de6722120450a23bd2
-
SHA256
52b398e913cbcdc27ee1e457c2d065ba1b626da70c71dd6af36ac77cc0c3d688
-
SHA512
3e164dc9e5f4cbfff15861c0df5379c8e52c1b932d37edd5a32c251e3cbd44d1a4d025303f607a1b0d844a4b3ddcea3446a45c19ac3c6b07bdd429660ef1e912
-
SSDEEP
1536:Is9dgnE316Lti8n42APNR2dcScLcPcxeTanuUHWOIs3xxNMq39gk34iSf:ME+4PNEdcScLcPcfnuo0X
Static task
static1
Behavioral task
behavioral1
Sample
52b398e913cbcdc27ee1e457c2d065ba1b626da70c71dd6af36ac77cc0c3d688.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52b398e913cbcdc27ee1e457c2d065ba1b626da70c71dd6af36ac77cc0c3d688.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
52b398e913cbcdc27ee1e457c2d065ba1b626da70c71dd6af36ac77cc0c3d688
-
Size
84KB
-
MD5
9f8f47265c5ced444406f6fce24064d0
-
SHA1
da2578a5d80b9e1f38ec59de6722120450a23bd2
-
SHA256
52b398e913cbcdc27ee1e457c2d065ba1b626da70c71dd6af36ac77cc0c3d688
-
SHA512
3e164dc9e5f4cbfff15861c0df5379c8e52c1b932d37edd5a32c251e3cbd44d1a4d025303f607a1b0d844a4b3ddcea3446a45c19ac3c6b07bdd429660ef1e912
-
SSDEEP
1536:Is9dgnE316Lti8n42APNR2dcScLcPcxeTanuUHWOIs3xxNMq39gk34iSf:ME+4PNEdcScLcPcfnuo0X
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2