3bf934f4485ae08c5773b3ba8c995224e7fe99ff6b70f5847abdf344dc89dc7c | Triage

Sharing

General

Target

3bf934f4485ae08c5773b3ba8c995224e7fe99ff6b70f5847abdf344dc89dc7cN
Size

256KB
Sample

240921-ar3cdsweqg
MD5

e2905c410e8a6a8077de86a98424c630
SHA1

cc076bf4cb7bfdebcc7c17194b22d74d89260cb7
SHA256

3bf934f4485ae08c5773b3ba8c995224e7fe99ff6b70f5847abdf344dc89dc7c
SHA512

27586dd017fa3a3b770a8249795beb2c2af13b951862df4d5006a0c678c71f89d8f35ebca4967eef7ab0783f6d0ab72311d4ba2b6c5ea6ee130d9e8e0dfb23bd
SSDEEP

6144:CfgNPlptNvl9fm0UBFsqMabeYiUDogpF:CW9n9lJvaFsqMvq

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  3bf934f4485ae08c5773b3ba8c995224e7fe99ff6b70f5847abdf344dc89dc7cN
- Size
  
  256KB
- MD5
  
  e2905c410e8a6a8077de86a98424c630
- SHA1
  
  cc076bf4cb7bfdebcc7c17194b22d74d89260cb7
- SHA256
  
  3bf934f4485ae08c5773b3ba8c995224e7fe99ff6b70f5847abdf344dc89dc7c
- SHA512
  
  27586dd017fa3a3b770a8249795beb2c2af13b951862df4d5006a0c678c71f89d8f35ebca4967eef7ab0783f6d0ab72311d4ba2b6c5ea6ee130d9e8e0dfb23bd
- SSDEEP
  
  6144:CfgNPlptNvl9fm0UBFsqMabeYiUDogpF:CW9n9lJvaFsqMvq
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence