7e8dff7aa5c34402ca2dcbd9f09c59a3b5d1627a2802af32f34ba452efb8aca7 | Triage

Sharing

General

Target

7e8dff7aa5c34402ca2dcbd9f09c59a3b5d1627a2802af32f34ba452efb8aca7N
Size

248KB
Sample

240920-n5d4lsvdrh
MD5

e6f27d03ebcb1664473bdd50149743a0
SHA1

0c12c77283137c6993e02e91ffbb58d4b7faa7e0
SHA256

7e8dff7aa5c34402ca2dcbd9f09c59a3b5d1627a2802af32f34ba452efb8aca7
SHA512

cdf31db8fd821d30cbae7484e121ca82ff76c062430d89bc943b53b8da12110378c3154087b8daa29bd85720e6f255d25dbdd4d8dbaad770ee975efc4732102d
SSDEEP

3072:nOjqvvMMjQdrgUDdCGAX31X7tlcxEHglJsd1/Ab32yZlOsQqO1j99Mqo:vcdlcX31X7tlMGFTy6sQvm

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  7e8dff7aa5c34402ca2dcbd9f09c59a3b5d1627a2802af32f34ba452efb8aca7N
- Size
  
  248KB
- MD5
  
  e6f27d03ebcb1664473bdd50149743a0
- SHA1
  
  0c12c77283137c6993e02e91ffbb58d4b7faa7e0
- SHA256
  
  7e8dff7aa5c34402ca2dcbd9f09c59a3b5d1627a2802af32f34ba452efb8aca7
- SHA512
  
  cdf31db8fd821d30cbae7484e121ca82ff76c062430d89bc943b53b8da12110378c3154087b8daa29bd85720e6f255d25dbdd4d8dbaad770ee975efc4732102d
- SSDEEP
  
  3072:nOjqvvMMjQdrgUDdCGAX31X7tlcxEHglJsd1/Ab32yZlOsQqO1j99Mqo:vcdlcX31X7tlMGFTy6sQvm
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence