8f1fb2388dbbec80390ec98e984963c881f8753c8204003f2732bd147cf8c5bd | Triage

Sharing

General

Target

64e93f519afb6ad1800523b340eb9890N
Size

152KB
Sample

240907-yc8gvs1crq
MD5

64e93f519afb6ad1800523b340eb9890
SHA1

1279ff70aef7a417d64658d842f9911314dd6842
SHA256

8f1fb2388dbbec80390ec98e984963c881f8753c8204003f2732bd147cf8c5bd
SHA512

0c61b1ff95bc2915cdaa7d17e67910f61770459b4078135a614b2f26ce230fa5d9c1a34a5c9a7fc066fe1511b19472f0a99593e179229f8e6e4dbd241b058e33
SSDEEP

3072:0hUFgMTQtKrueiygR4O6avJamofroE5j4oQcB4:JgAQtKSMgR56avUmqdri

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  64e93f519afb6ad1800523b340eb9890N
- Size
  
  152KB
- MD5
  
  64e93f519afb6ad1800523b340eb9890
- SHA1
  
  1279ff70aef7a417d64658d842f9911314dd6842
- SHA256
  
  8f1fb2388dbbec80390ec98e984963c881f8753c8204003f2732bd147cf8c5bd
- SHA512
  
  0c61b1ff95bc2915cdaa7d17e67910f61770459b4078135a614b2f26ce230fa5d9c1a34a5c9a7fc066fe1511b19472f0a99593e179229f8e6e4dbd241b058e33
- SSDEEP
  
  3072:0hUFgMTQtKrueiygR4O6avJamofroE5j4oQcB4:JgAQtKSMgR56avUmqdri
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence