f881aaf0b1dd4086be90d710293d86ce06edec5d33300662995ab23e57b5347f | Triage

Sharing

General

Target

a262c6f074c9838bfae7ce1e9116ccc0N
Size

236KB
Sample

240909-l4azfsvdqd
MD5

a262c6f074c9838bfae7ce1e9116ccc0
SHA1

3e2e578c6782db81be1bc648af8391b3985194ac
SHA256

f881aaf0b1dd4086be90d710293d86ce06edec5d33300662995ab23e57b5347f
SHA512

537306b8d5eb83dec6474981c198e62086d47103dfe55099e94c16df9029b6eb916b3bf5032da4956d2451f18f3b8bec5fee5e1bf16431e8c13695cccaf54e31
SSDEEP

6144:L24hiRIc+WCNmWK/fObT/bGiPsiet1yXsi+78wkZIx9rM+iOLtC1Et0P3tM2g2a:Soc+WCNmWK/fObT/bGiPsieAwkZIx9rT

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  a262c6f074c9838bfae7ce1e9116ccc0N
- Size
  
  236KB
- MD5
  
  a262c6f074c9838bfae7ce1e9116ccc0
- SHA1
  
  3e2e578c6782db81be1bc648af8391b3985194ac
- SHA256
  
  f881aaf0b1dd4086be90d710293d86ce06edec5d33300662995ab23e57b5347f
- SHA512
  
  537306b8d5eb83dec6474981c198e62086d47103dfe55099e94c16df9029b6eb916b3bf5032da4956d2451f18f3b8bec5fee5e1bf16431e8c13695cccaf54e31
- SSDEEP
  
  6144:L24hiRIc+WCNmWK/fObT/bGiPsiet1yXsi+78wkZIx9rM+iOLtC1Et0P3tM2g2a:Soc+WCNmWK/fObT/bGiPsieAwkZIx9rT
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence