4a93984ce38bc47e15d2ac6d66e2ed8ced20ea763b8e20e629136bf2b9fff12e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a93984ce38bc47e15d2ac6d66e2ed8ced20ea763b8e20e629136bf2b9fff12eN
Size

68KB
Sample

240921-npbcsazgqj
MD5

be162e9effa0e369cb4165300d940f80
SHA1

eef2d5087cd5bcea34e0a5edcf027938f4bde939
SHA256

4a93984ce38bc47e15d2ac6d66e2ed8ced20ea763b8e20e629136bf2b9fff12e
SHA512

b418c2b8054939edbd97740a0a7554abb8686472bddc1194b2ad27ffb1fce249ec3ff0afbfe5913837479dd247df5d3d2d5e0d4e316564e44bb70fa204221ac9
SSDEEP

768:icaliTd6UTAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:5aIxTTAcqOK3qowgnt1d

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  4a93984ce38bc47e15d2ac6d66e2ed8ced20ea763b8e20e629136bf2b9fff12eN
- Size
  
  68KB
- MD5
  
  be162e9effa0e369cb4165300d940f80
- SHA1
  
  eef2d5087cd5bcea34e0a5edcf027938f4bde939
- SHA256
  
  4a93984ce38bc47e15d2ac6d66e2ed8ced20ea763b8e20e629136bf2b9fff12e
- SHA512
  
  b418c2b8054939edbd97740a0a7554abb8686472bddc1194b2ad27ffb1fce249ec3ff0afbfe5913837479dd247df5d3d2d5e0d4e316564e44bb70fa204221ac9
- SSDEEP
  
  768:icaliTd6UTAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:5aIxTTAcqOK3qowgnt1d
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence