7a2a65983dfe4437300c11b7d32f49933ca027b8d4166248b256125f0b51c983 | Triage

Sharing

General

Target

5414fcc752e86262d0b3d7cc0f0cd474.zip
Size

82KB
Sample

240906-3enyfsshnl
MD5

5ea522e6d8f526482d8b4191ec0366e5
SHA1

a7b2b4d86d0079819e89188a686b02649f851d31
SHA256

7a2a65983dfe4437300c11b7d32f49933ca027b8d4166248b256125f0b51c983
SHA512

6c256714eb37dbc28576de264dffa00205628e2f5822be6bc223c862ce131bd9a3690e91d36a1645217687e3e4b5a5f5f35ec93d1d717b59b2b1190f944296b5
SSDEEP

1536:xf2EvYDGlHAhuLD2XccIjt6d5gksOGga4sZ4sgRnTV1aRFdOyC1x3xosMu:l9YKJAh5DIjgXsOLvsCTVGuyWDMu

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  e38e22adb7d11b38550a42d9c05814285c2dbfb4815e5dfea8951396ca86c45d
- Size
  
  200KB
- MD5
  
  5414fcc752e86262d0b3d7cc0f0cd474
- SHA1
  
  dc6af76318bf621023ca1c1637a7308148239093
- SHA256
  
  e38e22adb7d11b38550a42d9c05814285c2dbfb4815e5dfea8951396ca86c45d
- SHA512
  
  c9346351f23d648442560d878f3db9b86b583899e63d96b3697dc2cb50875a60b82fe676ecffc90104ddafad85756269d69674dd62b94b4d64a63988b09ccc02
- SSDEEP
  
  3072:6C6To/0Yxs0tQ9nLHbB9WPliBs2HWWEakGJm9C2:6Cji4QxL7B9WPli+yWWEazq
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence