978bf35000aec54e08e7572607d05773da746d7b98ed58447c2900f5206e2fba | Triage

Resubmissions

29-11-2024 08:36

241129-khsfya1ldq 10

01-10-2024 11:04

241001-m6jvtazeqg 7

Sharing

General

Target

978bf35000aec54e08e7572607d05773da746d7b98ed58447c2900f5206e2fbaN
Size

1.9MB
Sample

241001-m6jvtazeqg
MD5

c4e7360de90c311c8ee74feb603c4e40
SHA1

8c5eef4ba7ea32966655294a07462b366fee6c2f
SHA256

978bf35000aec54e08e7572607d05773da746d7b98ed58447c2900f5206e2fba
SHA512

8b2d2727673e284ec7b71542722ed86bdfb907b7f864d9cc840c37361142d70bd45059dd5842f036ef8160468251265fae71042c31813b0787477565a4a0ec04
SSDEEP

49152:wnsHyjtk2MYC5GD6/+6X/4mqCGdhaD8sLu3ChsFl2U8t:wnsmtk2a52G9D8cZsJI

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  978bf35000aec54e08e7572607d05773da746d7b98ed58447c2900f5206e2fbaN
- Size
  
  1.9MB
- MD5
  
  c4e7360de90c311c8ee74feb603c4e40
- SHA1
  
  8c5eef4ba7ea32966655294a07462b366fee6c2f
- SHA256
  
  978bf35000aec54e08e7572607d05773da746d7b98ed58447c2900f5206e2fba
- SHA512
  
  8b2d2727673e284ec7b71542722ed86bdfb907b7f864d9cc840c37361142d70bd45059dd5842f036ef8160468251265fae71042c31813b0787477565a4a0ec04
- SSDEEP
  
  49152:wnsHyjtk2MYC5GD6/+6X/4mqCGdhaD8sLu3ChsFl2U8t:wnsmtk2a52G9D8cZsJI
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence