b391dbfb2c859d6ad37c0465b2f00f266dc43e1e6885ba9e173d6f055ca6c064 | Triage

Sharing

General

Target

b391dbfb2c859d6ad37c0465b2f00f266dc43e1e6885ba9e173d6f055ca6c064N
Size

77KB
Sample

240921-ew2nwavcpr
MD5

fdc7e3a8a1093afe591faf097b5ae760
SHA1

a81255087580171d7a5a7a3e87e337888125d00b
SHA256

b391dbfb2c859d6ad37c0465b2f00f266dc43e1e6885ba9e173d6f055ca6c064
SHA512

b7c86658f1804e251159a5dc79587ec6b9517fc62c7f59ab1c3462b672a7c5ce007f8558569329eaaaa85f9e6f66b3d4a19dcd3b756d8dc016c977477c230fff
SSDEEP

1536:0dGx81mB15Bx8pEttgdO/mXpgWXOJgQmmogDcMH5fCVsJVafuegWXAi+oX9tWV0B:oGx81k15Bx8pEttgdO/mXpgWXOJgQmmS

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  b391dbfb2c859d6ad37c0465b2f00f266dc43e1e6885ba9e173d6f055ca6c064N
- Size
  
  77KB
- MD5
  
  fdc7e3a8a1093afe591faf097b5ae760
- SHA1
  
  a81255087580171d7a5a7a3e87e337888125d00b
- SHA256
  
  b391dbfb2c859d6ad37c0465b2f00f266dc43e1e6885ba9e173d6f055ca6c064
- SHA512
  
  b7c86658f1804e251159a5dc79587ec6b9517fc62c7f59ab1c3462b672a7c5ce007f8558569329eaaaa85f9e6f66b3d4a19dcd3b756d8dc016c977477c230fff
- SSDEEP
  
  1536:0dGx81mB15Bx8pEttgdO/mXpgWXOJgQmmogDcMH5fCVsJVafuegWXAi+oX9tWV0B:oGx81k15Bx8pEttgdO/mXpgWXOJgQmmS
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence