6b066eb50c7c517833d293657c061d8cd0fc9038701d46f221157841eddf15f4 | Triage

Sharing

General

Target

6b066eb50c7c517833d293657c061d8cd0fc9038701d46f221157841eddf15f4N
Size

124KB
Sample

240920-v474mayfmk
MD5

a33293fed79a6a09bfbeb78944d7ef90
SHA1

73c18ddecf18175fbdb10d776a72567eff2601fd
SHA256

6b066eb50c7c517833d293657c061d8cd0fc9038701d46f221157841eddf15f4
SHA512

d15e18dc9908b1542a9eb76f807602e7ff65309fe8139ef14c6b8b28c5fa7a1b38b91248e9773301a1d5adf33ce8437ad9b2b442ace29cd71ce2b096fda13228
SSDEEP

3072:aaAfUEiIiRrQKGcNqnGrD6uvIepyJS6f1qred:ahfiIiRrQKGciwQJr

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  6b066eb50c7c517833d293657c061d8cd0fc9038701d46f221157841eddf15f4N
- Size
  
  124KB
- MD5
  
  a33293fed79a6a09bfbeb78944d7ef90
- SHA1
  
  73c18ddecf18175fbdb10d776a72567eff2601fd
- SHA256
  
  6b066eb50c7c517833d293657c061d8cd0fc9038701d46f221157841eddf15f4
- SHA512
  
  d15e18dc9908b1542a9eb76f807602e7ff65309fe8139ef14c6b8b28c5fa7a1b38b91248e9773301a1d5adf33ce8437ad9b2b442ace29cd71ce2b096fda13228
- SSDEEP
  
  3072:aaAfUEiIiRrQKGcNqnGrD6uvIepyJS6f1qred:ahfiIiRrQKGciwQJr
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence