db08c6db0f4b2ee5ee34e4df8c03001e282c3854afb57ebb09297e27f283717f | Triage

Sharing

General

Target

db08c6db0f4b2ee5ee34e4df8c03001e282c3854afb57ebb09297e27f283717fN
Size

132KB
Sample

240920-l56gra1enk
MD5

04d4592cf6a7c7dde25b2da92b7beca0
SHA1

1d8c4d7d3d3f6ad3ae59e87dc401a5e9240250ad
SHA256

db08c6db0f4b2ee5ee34e4df8c03001e282c3854afb57ebb09297e27f283717f
SHA512

a71154a2a2c08537fd8bea61332ded27cad265d08d4315aedd937608aba5535a21d01a3dcb5cc77e7a497895836ea01e8359b30944f6c1e0c2f6be8ddc72388d
SSDEEP

3072:VeDxqy7TBJVSgpS5uIyio/Conuh1CNvDfVe:VWqoTB2grko/C2gcZe

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  db08c6db0f4b2ee5ee34e4df8c03001e282c3854afb57ebb09297e27f283717fN
- Size
  
  132KB
- MD5
  
  04d4592cf6a7c7dde25b2da92b7beca0
- SHA1
  
  1d8c4d7d3d3f6ad3ae59e87dc401a5e9240250ad
- SHA256
  
  db08c6db0f4b2ee5ee34e4df8c03001e282c3854afb57ebb09297e27f283717f
- SHA512
  
  a71154a2a2c08537fd8bea61332ded27cad265d08d4315aedd937608aba5535a21d01a3dcb5cc77e7a497895836ea01e8359b30944f6c1e0c2f6be8ddc72388d
- SSDEEP
  
  3072:VeDxqy7TBJVSgpS5uIyio/Conuh1CNvDfVe:VWqoTB2grko/C2gcZe
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence