226f7a154a2b7e08d33fa456630f37bace9df01a6a781adf9f8a8d5c25d6efcf | Triage

Sharing

General

Target

226f7a154a2b7e08d33fa456630f37bace9df01a6a781adf9f8a8d5c25d6efcfN.exe
Size

106KB
Sample

240925-bta7cswgpq
MD5

fc99ae7c1213311b0f5ba99ffa3c5e00
SHA1

c0bd744f6482babf491c48e3f44b22ab24b53bd7
SHA256

226f7a154a2b7e08d33fa456630f37bace9df01a6a781adf9f8a8d5c25d6efcf
SHA512

e9b1606aae354bcc1500c66c8c5f49a107d6cdb92d6f19b86e6bea109505d6a6dd0112a15f6996b82064197eb14b5b8472b07099fdf14661a266885582b1b2f7
SSDEEP

1536:2zfXIsxrhzk2nfsW3ou3yWW2dvcW6eHcBwUi6vWE0Dl27b58XBdqaMGxuA1B:yfjxrhzk2nfsWhP7dvavi6vWEbh8XT

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  226f7a154a2b7e08d33fa456630f37bace9df01a6a781adf9f8a8d5c25d6efcfN.exe
- Size
  
  106KB
- MD5
  
  fc99ae7c1213311b0f5ba99ffa3c5e00
- SHA1
  
  c0bd744f6482babf491c48e3f44b22ab24b53bd7
- SHA256
  
  226f7a154a2b7e08d33fa456630f37bace9df01a6a781adf9f8a8d5c25d6efcf
- SHA512
  
  e9b1606aae354bcc1500c66c8c5f49a107d6cdb92d6f19b86e6bea109505d6a6dd0112a15f6996b82064197eb14b5b8472b07099fdf14661a266885582b1b2f7
- SSDEEP
  
  1536:2zfXIsxrhzk2nfsW3ou3yWW2dvcW6eHcBwUi6vWE0Dl27b58XBdqaMGxuA1B:yfjxrhzk2nfsWhP7dvavi6vWEbh8XT
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery