ac72ae1f69438e0f72abceadb1bcc3b559dde503c8cd1340c35ce845c82961b4 | Triage

Sharing

General

Target

ac72ae1f69438e0f72abceadb1bcc3b559dde503c8cd1340c35ce845c82961b4N
Size

88KB
Sample

241004-ng2j1a1dnr
MD5

905231dd220ff82ca53e36234e5ce530
SHA1

0e58f6fa34ce07b5b74c44a0e2f8ac34069dd633
SHA256

ac72ae1f69438e0f72abceadb1bcc3b559dde503c8cd1340c35ce845c82961b4
SHA512

2e1c348e3f57d3a715895c181cfabab7a3e993cd24a7a50ad7921a50a2f9086b5595dba7ab88f5f0e7b1aa01118efa11bea5462bb4153c0bdc062c3cdb6f1dee
SSDEEP

768:vAG68qOJ+TtXa4kwHpFeh6gM1rA8dOsc7jUq4RkA5o3K1DfsvtzsXjLft+9o1mm:vAGHqlZK4zLFjnAzA5o6BfItoXjLl0hm

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  ac72ae1f69438e0f72abceadb1bcc3b559dde503c8cd1340c35ce845c82961b4N
- Size
  
  88KB
- MD5
  
  905231dd220ff82ca53e36234e5ce530
- SHA1
  
  0e58f6fa34ce07b5b74c44a0e2f8ac34069dd633
- SHA256
  
  ac72ae1f69438e0f72abceadb1bcc3b559dde503c8cd1340c35ce845c82961b4
- SHA512
  
  2e1c348e3f57d3a715895c181cfabab7a3e993cd24a7a50ad7921a50a2f9086b5595dba7ab88f5f0e7b1aa01118efa11bea5462bb4153c0bdc062c3cdb6f1dee
- SSDEEP
  
  768:vAG68qOJ+TtXa4kwHpFeh6gM1rA8dOsc7jUq4RkA5o3K1DfsvtzsXjLft+9o1mm:vAGHqlZK4zLFjnAzA5o6BfItoXjLl0hm
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence