15590ee67d1977b1695ce3f8078edee4b8640d7c3dbe2c4bca4ab25139502204 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Setup.exe.v
Size

90.9MB
Sample

240913-by19caxekd
MD5

a0a9189ea3fad0d0f80f737709f3a323
SHA1

b3db5edf638510811ddc4f7df2376af0811325b2
SHA256

15590ee67d1977b1695ce3f8078edee4b8640d7c3dbe2c4bca4ab25139502204
SHA512

16a3db8e4e29831b486506921ab3546ede2bfc53e9d6674ec10fd9f4fb4b909114212c3322c105e211a9c1a009ee25c077b1a177004e13587ace8bb7fb7a1068
SSDEEP

1572864:0sdkkGFinQ6dkkGFinQ6dkkG5hnFHxDE8aJQwmRmF+9+S+V9LyN0C1qh6maqR:0jFiQ9FiQ9/V51f+p3uN0CaH

Score

7^/10

discovery execution persistence

Malware Config

Targets

- Target
  
  Setup.exe.v
- Size
  
  90.9MB
- MD5
  
  a0a9189ea3fad0d0f80f737709f3a323
- SHA1
  
  b3db5edf638510811ddc4f7df2376af0811325b2
- SHA256
  
  15590ee67d1977b1695ce3f8078edee4b8640d7c3dbe2c4bca4ab25139502204
- SHA512
  
  16a3db8e4e29831b486506921ab3546ede2bfc53e9d6674ec10fd9f4fb4b909114212c3322c105e211a9c1a009ee25c077b1a177004e13587ace8bb7fb7a1068
- SSDEEP
  
  1572864:0sdkkGFinQ6dkkGFinQ6dkkG5hnFHxDE8aJQwmRmF+9+S+V9LyN0C1qh6maqR:0jFiQ9FiQ9/V51f+p3uN0CaH
Score

7^/10

discovery execution persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistence

behavioral2

discoveryexecutionpersistence