5f1ca318ae668c02fe8ec384995e243a7d7a4d82de2f2803e5f01b9ecc8fce9d | Triage

Sharing

General

Target

5f1ca318ae668c02fe8ec384995e243a7d7a4d82de2f2803e5f01b9ecc8fce9dN.exe
Size

94KB
Sample

241119-n16m3azren
MD5

6423f6245e7db0ef8f313a9751a557a0
SHA1

8c1b8b24710a2596542920efc2a4d8b9917e163e
SHA256

5f1ca318ae668c02fe8ec384995e243a7d7a4d82de2f2803e5f01b9ecc8fce9d
SHA512

78ceb19b58dec946398c762a095a1d2c4bb078e41c1528f90cf6729a488b5c865abd2a53f4042d456d369390993057c32995c2129acece553ad45184796fb0ad
SSDEEP

1536:skPjmPwvx3PtLBzGMlGO+eo+zCj4CFgjASG3KazRZICrWaGZh7LLx1t:skLmuftLBzfIOz4VSGaqJrWNZ1Lx1t

Score

7^/10

defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  5f1ca318ae668c02fe8ec384995e243a7d7a4d82de2f2803e5f01b9ecc8fce9dN.exe
- Size
  
  94KB
- MD5
  
  6423f6245e7db0ef8f313a9751a557a0
- SHA1
  
  8c1b8b24710a2596542920efc2a4d8b9917e163e
- SHA256
  
  5f1ca318ae668c02fe8ec384995e243a7d7a4d82de2f2803e5f01b9ecc8fce9d
- SHA512
  
  78ceb19b58dec946398c762a095a1d2c4bb078e41c1528f90cf6729a488b5c865abd2a53f4042d456d369390993057c32995c2129acece553ad45184796fb0ad
- SSDEEP
  
  1536:skPjmPwvx3PtLBzGMlGO+eo+zCj4CFgjASG3KazRZICrWaGZh7LLx1t:skLmuftLBzfIOz4VSGaqJrWNZ1Lx1t
Score

7^/10

defense_evasion discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence