482477317cdeef87ca3613a61c2008721e58312dc0bf8be4a4b6fb2650ec9f98 | Triage

Sharing

General

Target

482477317cdeef87ca3613a61c2008721e58312dc0bf8be4a4b6fb2650ec9f98N
Size

111KB
Sample

240920-xtbnsasgrm
MD5

5c3efbf72f43f9ac8d1251acbd05ad50
SHA1

6e81d4cc2c160ccea357cf6302e95c2592224a8b
SHA256

482477317cdeef87ca3613a61c2008721e58312dc0bf8be4a4b6fb2650ec9f98
SHA512

daac2cceeb370ade0768900bd9a5bb0e20768d520e3f6abebf1564738d4203579772f66a005857aec676afc6c01309b3971e5841e81a827123917c6a8dc898d8
SSDEEP

768:sduwfCcAl2IRlNFQK33bP34DGltCJWx+7AppL4zG4dslM8lP+wgG0SXdkUr9AeXd:sdFwjl8K33DlN+aLHM8WSXjyo

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  482477317cdeef87ca3613a61c2008721e58312dc0bf8be4a4b6fb2650ec9f98N
- Size
  
  111KB
- MD5
  
  5c3efbf72f43f9ac8d1251acbd05ad50
- SHA1
  
  6e81d4cc2c160ccea357cf6302e95c2592224a8b
- SHA256
  
  482477317cdeef87ca3613a61c2008721e58312dc0bf8be4a4b6fb2650ec9f98
- SHA512
  
  daac2cceeb370ade0768900bd9a5bb0e20768d520e3f6abebf1564738d4203579772f66a005857aec676afc6c01309b3971e5841e81a827123917c6a8dc898d8
- SSDEEP
  
  768:sduwfCcAl2IRlNFQK33bP34DGltCJWx+7AppL4zG4dslM8lP+wgG0SXdkUr9AeXd:sdFwjl8K33DlN+aLHM8WSXjyo
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence