22073eaf595dfde02c3f7356e728e9e1075f7d589839493824d7a3e3cddbcc2d | Triage

Sharing

General

Target

22073eaf595dfde02c3f7356e728e9e1075f7d589839493824d7a3e3cddbcc2dN
Size

88KB
Sample

240920-2bnyls1fpf
MD5

821d510395390ac84f27da308cc89870
SHA1

e68a1d54f0f21955cd79aac9cb2d26c0cd7af284
SHA256

22073eaf595dfde02c3f7356e728e9e1075f7d589839493824d7a3e3cddbcc2d
SHA512

af2038d097e9c54c1d806ea7c51c41ee7214edfa7596a7708f9fd65590eeb3710b25f8803bfa85969167d9b1d76269e8ffad454a54d44d9af8deca9d92af883b
SSDEEP

768:Hl6jxOJETcaz9IHpFeh6RM1rA8dOsk7jbqqRkA5okK1DfsvtDzsXjLft+9o1Jz:Hlcx/AauLFUnzJA5o9BfItDoXjLl0+z

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  22073eaf595dfde02c3f7356e728e9e1075f7d589839493824d7a3e3cddbcc2dN
- Size
  
  88KB
- MD5
  
  821d510395390ac84f27da308cc89870
- SHA1
  
  e68a1d54f0f21955cd79aac9cb2d26c0cd7af284
- SHA256
  
  22073eaf595dfde02c3f7356e728e9e1075f7d589839493824d7a3e3cddbcc2d
- SHA512
  
  af2038d097e9c54c1d806ea7c51c41ee7214edfa7596a7708f9fd65590eeb3710b25f8803bfa85969167d9b1d76269e8ffad454a54d44d9af8deca9d92af883b
- SSDEEP
  
  768:Hl6jxOJETcaz9IHpFeh6RM1rA8dOsk7jbqqRkA5okK1DfsvtDzsXjLft+9o1Jz:Hlcx/AauLFUnzJA5o9BfItDoXjLl0+z
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence