03907110e6fedb43d09de8ccbe4075192767556959db4969c7640eb152aefb93 | Triage

Sharing

General

Target

03907110e6fedb43d09de8ccbe4075192767556959db4969c7640eb152aefb93N
Size

164KB
Sample

240921-bjkcaaxhpc
MD5

6a3c0e8a8696265e01a1fc641568eff0
SHA1

a1e7898b97765d7c263055402861f4f808870b69
SHA256

03907110e6fedb43d09de8ccbe4075192767556959db4969c7640eb152aefb93
SHA512

31215527b52d6df7ab3ba35104a310ff2c32386ae608b9f715b973e616de1e48553909f2106a3698094394bdd48094c97dccb8e536b6a87fa1afc211294b9bcf
SSDEEP

3072:hsWcISl26veiCi36JRbs4jwKWuRr6TQY3RBTzFJ0T727a:hsWcIM26mJDjwZuesY3fTzFJ0T722

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  03907110e6fedb43d09de8ccbe4075192767556959db4969c7640eb152aefb93N
- Size
  
  164KB
- MD5
  
  6a3c0e8a8696265e01a1fc641568eff0
- SHA1
  
  a1e7898b97765d7c263055402861f4f808870b69
- SHA256
  
  03907110e6fedb43d09de8ccbe4075192767556959db4969c7640eb152aefb93
- SHA512
  
  31215527b52d6df7ab3ba35104a310ff2c32386ae608b9f715b973e616de1e48553909f2106a3698094394bdd48094c97dccb8e536b6a87fa1afc211294b9bcf
- SSDEEP
  
  3072:hsWcISl26veiCi36JRbs4jwKWuRr6TQY3RBTzFJ0T727a:hsWcIM26mJDjwZuesY3fTzFJ0T722
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence