b252d8ef46cebbb1030ba8b81cd07f3e0ff90c1aba38fb9bd253ad1593f2ecb4 | Triage

Sharing

General

Target

b252d8ef46cebbb1030ba8b81cd07f3e0ff90c1aba38fb9bd253ad1593f2ecb4N
Size

168KB
Sample

241002-bx3e1szhql
MD5

dcb18f314893de4f77cf4edf2b667720
SHA1

c62196e9067f8e06060707351f259f49f8105b0d
SHA256

b252d8ef46cebbb1030ba8b81cd07f3e0ff90c1aba38fb9bd253ad1593f2ecb4
SHA512

a4965f744efda288a0ed8636efcec6d0898ff556cd4fb23565eb42ca2fccdd82bbfcf44dfdb878548e4a0efa86de3c2f6506bb3ee42a0d03723bfe22a5f92464
SSDEEP

1536:He05LcmJPqPA7zTGRVu+1niPRC7gIeTo8dzQhihZOy+AMnmE7UkAUJZvhICqDoj4:rmiPqPGzTGRVuI7bkzrhT+nmEASq

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  b252d8ef46cebbb1030ba8b81cd07f3e0ff90c1aba38fb9bd253ad1593f2ecb4N
- Size
  
  168KB
- MD5
  
  dcb18f314893de4f77cf4edf2b667720
- SHA1
  
  c62196e9067f8e06060707351f259f49f8105b0d
- SHA256
  
  b252d8ef46cebbb1030ba8b81cd07f3e0ff90c1aba38fb9bd253ad1593f2ecb4
- SHA512
  
  a4965f744efda288a0ed8636efcec6d0898ff556cd4fb23565eb42ca2fccdd82bbfcf44dfdb878548e4a0efa86de3c2f6506bb3ee42a0d03723bfe22a5f92464
- SSDEEP
  
  1536:He05LcmJPqPA7zTGRVu+1niPRC7gIeTo8dzQhihZOy+AMnmE7UkAUJZvhICqDoj4:rmiPqPGzTGRVuI7bkzrhT+nmEASq
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence