afde4a79500a343ce71311be0261dbdef9fa1d6e07c424c3ca67499ff2ec8e42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afde4a79500a343ce71311be0261dbdef9fa1d6e07c424c3ca67499ff2ec8e42N
Size

124KB
Sample

240930-kz851s1ejb
MD5

a4f817ab4a661cfeeb293b7a4431f770
SHA1

1bb4ab81bd9155f3fef97b80e9e1ce8ef869d999
SHA256

afde4a79500a343ce71311be0261dbdef9fa1d6e07c424c3ca67499ff2ec8e42
SHA512

3315cb876f1151ec711d4d6161c6ce0119eb3d7fd5b852c5db54d1841b17770f34b3018483bec3d558f10190ab5ac7e443d8a48f59641d71232d1fe7d2145482
SSDEEP

3072:a1i/NU8bOMYcYYcmy5cU+gTn6HOjDhWrzvvQwlgOts5YmMOMYcYY51i/NU8:Ei/NjO5YBgegD0PHzSW3Oai/N

Score

8^/10

defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  afde4a79500a343ce71311be0261dbdef9fa1d6e07c424c3ca67499ff2ec8e42N
- Size
  
  124KB
- MD5
  
  a4f817ab4a661cfeeb293b7a4431f770
- SHA1
  
  1bb4ab81bd9155f3fef97b80e9e1ce8ef869d999
- SHA256
  
  afde4a79500a343ce71311be0261dbdef9fa1d6e07c424c3ca67499ff2ec8e42
- SHA512
  
  3315cb876f1151ec711d4d6161c6ce0119eb3d7fd5b852c5db54d1841b17770f34b3018483bec3d558f10190ab5ac7e443d8a48f59641d71232d1fe7d2145482
- SSDEEP
  
  3072:a1i/NU8bOMYcYYcmy5cU+gTn6HOjDhWrzvvQwlgOts5YmMOMYcYY51i/NU8:Ei/NjO5YBgegD0PHzSW3Oai/N
Score

8^/10

defense_evasion discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence