0f1c329b6d6a4bbcfdf9af38b7b02343e1c89c7dad4e00f34a78e6f524d65083 | Triage

Sharing

General

Target

0f1c329b6d6a4bbcfdf9af38b7b02343e1c89c7dad4e00f34a78e6f524d65083N
Size

244KB
Sample

240920-1zj4ws1cjq
MD5

0250932f1c0c335c166ecbe2150d2d70
SHA1

9809dea2690123bcd386aaa8a79697282413ca71
SHA256

0f1c329b6d6a4bbcfdf9af38b7b02343e1c89c7dad4e00f34a78e6f524d65083
SHA512

98af696e5f023f7458a1c38eee26019ab062a52d5cec03b1f75684ef71b1a96f2213e24b23050ebb8c45ee3588d22d8b381b90ec84b7b47e5bc07d7343612212
SSDEEP

768:zZ8buvNS3960BVJ14enGamr4YV7RiLklI9MMkkFXUG8sWEMg5blICkNnT2NoOLri:zOu+MORabaja3ataQ5qOBHyi9Zx0klo

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  0f1c329b6d6a4bbcfdf9af38b7b02343e1c89c7dad4e00f34a78e6f524d65083N
- Size
  
  244KB
- MD5
  
  0250932f1c0c335c166ecbe2150d2d70
- SHA1
  
  9809dea2690123bcd386aaa8a79697282413ca71
- SHA256
  
  0f1c329b6d6a4bbcfdf9af38b7b02343e1c89c7dad4e00f34a78e6f524d65083
- SHA512
  
  98af696e5f023f7458a1c38eee26019ab062a52d5cec03b1f75684ef71b1a96f2213e24b23050ebb8c45ee3588d22d8b381b90ec84b7b47e5bc07d7343612212
- SSDEEP
  
  768:zZ8buvNS3960BVJ14enGamr4YV7RiLklI9MMkkFXUG8sWEMg5blICkNnT2NoOLri:zOu+MORabaja3ataQ5qOBHyi9Zx0klo
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence