b41039a3d98b77910a419ff3d6473aeb58465ff3e343c22ce2a90fbf4b803b61 | Triage

Sharing

General

Target

b41039a3d98b77910a419ff3d6473aeb58465ff3e343c22ce2a90fbf4b803b61N
Size

1.7MB
Sample

240919-k87zba1gqk
MD5

439d37549689dde8aba13dc1739667c0
SHA1

72c34fbe8caea1a434f35aa909f48b1faf35c34e
SHA256

b41039a3d98b77910a419ff3d6473aeb58465ff3e343c22ce2a90fbf4b803b61
SHA512

fffa40089dc8ef227bc32e61f3ee7bdc01e0a7c4ffe9cef052ffebe053d182633bb77b93b6c8366ef571926daa07e5a81d5c2b7ef248fa2c4648e4adf00a164e
SSDEEP

24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNw:mbTChxKCnFnQXBbrtgb/iQvu0UHOn

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  b41039a3d98b77910a419ff3d6473aeb58465ff3e343c22ce2a90fbf4b803b61N
- Size
  
  1.7MB
- MD5
  
  439d37549689dde8aba13dc1739667c0
- SHA1
  
  72c34fbe8caea1a434f35aa909f48b1faf35c34e
- SHA256
  
  b41039a3d98b77910a419ff3d6473aeb58465ff3e343c22ce2a90fbf4b803b61
- SHA512
  
  fffa40089dc8ef227bc32e61f3ee7bdc01e0a7c4ffe9cef052ffebe053d182633bb77b93b6c8366ef571926daa07e5a81d5c2b7ef248fa2c4648e4adf00a164e
- SSDEEP
  
  24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNw:mbTChxKCnFnQXBbrtgb/iQvu0UHOn
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence