d04254222dfd4962bbcb964cf750fd7fac15015c66147fb727d11d486cb096f9 | Triage

Sharing

General

Target

d04254222dfd4962bbcb964cf750fd7fac15015c66147fb727d11d486cb096f9
Size

140KB
Sample

240909-dhtkns1dmc
MD5

9ca1d2108db4bb21acbab5013492c849
SHA1

54c33d24d3b0aaecdc2c41168f140fbb1eb3a060
SHA256

d04254222dfd4962bbcb964cf750fd7fac15015c66147fb727d11d486cb096f9
SHA512

b8c100af9c80a770052ceeb9561582fe165f167d656de667598348182a773a1b655b5463b9067a31d0355a5d52687d44951ee3bd5f349caf4168612c384e791e
SSDEEP

3072:cBq2qclSAY5uXq0cu3XMO4nZLJY0PoeU60ohKdlLWOx:cB6AY5uXq0cu3XMO4nZLJPot60ohKdlL

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  d04254222dfd4962bbcb964cf750fd7fac15015c66147fb727d11d486cb096f9
- Size
  
  140KB
- MD5
  
  9ca1d2108db4bb21acbab5013492c849
- SHA1
  
  54c33d24d3b0aaecdc2c41168f140fbb1eb3a060
- SHA256
  
  d04254222dfd4962bbcb964cf750fd7fac15015c66147fb727d11d486cb096f9
- SHA512
  
  b8c100af9c80a770052ceeb9561582fe165f167d656de667598348182a773a1b655b5463b9067a31d0355a5d52687d44951ee3bd5f349caf4168612c384e791e
- SSDEEP
  
  3072:cBq2qclSAY5uXq0cu3XMO4nZLJY0PoeU60ohKdlLWOx:cB6AY5uXq0cu3XMO4nZLJPot60ohKdlL
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence