52f5843694e43326392a4392396fa1dc7791f7877b1111ad429fb2343362bd87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52f5843694e43326392a4392396fa1dc7791f7877b1111ad429fb2343362bd87
Size

2.1MB
Sample

241013-x1fw3stdna
MD5

9c7c1462e10a4b3621f1b4569d66a49f
SHA1

5c98a2c4df12194d5212d6303e8ef5762fa9e13b
SHA256

52f5843694e43326392a4392396fa1dc7791f7877b1111ad429fb2343362bd87
SHA512

7e142bedb5596a2b108f1d76d94bc1368b3cf578dcea9c25f1783d3e54f04d281b727d56b483f0cfcc26282af5c2bec3796c41c8e2f65c2c3ba8554491da0808
SSDEEP

6144:2BDHmrz4niNy8o3Zp/TWt+g4RQTDUBO8/2vh+ziDV8m56TBac2GuA:wDHmoniNy8L8g4RgoBO8/2vhDX56T7

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  52f5843694e43326392a4392396fa1dc7791f7877b1111ad429fb2343362bd87
- Size
  
  2.1MB
- MD5
  
  9c7c1462e10a4b3621f1b4569d66a49f
- SHA1
  
  5c98a2c4df12194d5212d6303e8ef5762fa9e13b
- SHA256
  
  52f5843694e43326392a4392396fa1dc7791f7877b1111ad429fb2343362bd87
- SHA512
  
  7e142bedb5596a2b108f1d76d94bc1368b3cf578dcea9c25f1783d3e54f04d281b727d56b483f0cfcc26282af5c2bec3796c41c8e2f65c2c3ba8554491da0808
- SSDEEP
  
  6144:2BDHmrz4niNy8o3Zp/TWt+g4RQTDUBO8/2vh+ziDV8m56TBac2GuA:wDHmoniNy8L8g4RgoBO8/2vhDX56T7
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence