1c1e2cee44aa88b08dc8857facf5215d3074208f39cb000e652897379e3f8cb8 | Triage

Sharing

General

Target

1c1e2cee44aa88b08dc8857facf5215d3074208f39cb000e652897379e3f8cb8N
Size

156KB
Sample

240920-mpgdcssdkn
MD5

7ad484b58ab792ee7b9e615d79149bf0
SHA1

43f90253deae7fd7014fe89805085d5d0c8da535
SHA256

1c1e2cee44aa88b08dc8857facf5215d3074208f39cb000e652897379e3f8cb8
SHA512

523ba00a61eead0a9a739864a9ebdb6f9297be2f5f04dba1a995a86204cf7acdda53a38e68f682b1161f9285d3ada65bf2a56e6fe9eb83dc5130a55cd0d33dc3
SSDEEP

3072:fsTIWVcx8jeFvB0Z/I8xSFJKxr2CrILENo5X:ECIcvqVuJyr2CMLE+B

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  1c1e2cee44aa88b08dc8857facf5215d3074208f39cb000e652897379e3f8cb8N
- Size
  
  156KB
- MD5
  
  7ad484b58ab792ee7b9e615d79149bf0
- SHA1
  
  43f90253deae7fd7014fe89805085d5d0c8da535
- SHA256
  
  1c1e2cee44aa88b08dc8857facf5215d3074208f39cb000e652897379e3f8cb8
- SHA512
  
  523ba00a61eead0a9a739864a9ebdb6f9297be2f5f04dba1a995a86204cf7acdda53a38e68f682b1161f9285d3ada65bf2a56e6fe9eb83dc5130a55cd0d33dc3
- SSDEEP
  
  3072:fsTIWVcx8jeFvB0Z/I8xSFJKxr2CrILENo5X:ECIcvqVuJyr2CMLE+B
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence