921ee075a6f01559ad1716254bd4865469be6e0ea53fb5a6d2e538818fcca9f4 | Triage

Sharing

General

Target

921ee075a6f01559ad1716254bd4865469be6e0ea53fb5a6d2e538818fcca9f4N
Size

76KB
Sample

240920-2awxts1flc
MD5

01bbe0af85d40da5f55fea2928f25650
SHA1

5c90611c1fd08aec1a9662d6291fba653b0c72de
SHA256

921ee075a6f01559ad1716254bd4865469be6e0ea53fb5a6d2e538818fcca9f4
SHA512

d7e91b29f9b312ea124ec8690f863b4f3e366653886d03c346364302fcea4564d52a30cab014af069a9b0e6fc6d352468039d60cfb394845b16ab1396826b21b
SSDEEP

768:Xb6VvcTMnY+1j4I4SccFhqmvdgxXGcZDxc7mdKnI/:X4nV1U2c+qHhPZDW

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  921ee075a6f01559ad1716254bd4865469be6e0ea53fb5a6d2e538818fcca9f4N
- Size
  
  76KB
- MD5
  
  01bbe0af85d40da5f55fea2928f25650
- SHA1
  
  5c90611c1fd08aec1a9662d6291fba653b0c72de
- SHA256
  
  921ee075a6f01559ad1716254bd4865469be6e0ea53fb5a6d2e538818fcca9f4
- SHA512
  
  d7e91b29f9b312ea124ec8690f863b4f3e366653886d03c346364302fcea4564d52a30cab014af069a9b0e6fc6d352468039d60cfb394845b16ab1396826b21b
- SSDEEP
  
  768:Xb6VvcTMnY+1j4I4SccFhqmvdgxXGcZDxc7mdKnI/:X4nV1U2c+qHhPZDW
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence