3a9837b6435b62d0caeac4c051bfd5f640fc8cfefb0d6090743b6290f4b3648d | Triage

Sharing

General

Target

3a9837b6435b62d0caeac4c051bfd5f640fc8cfefb0d6090743b6290f4b3648d
Size

767KB
Sample

241120-1t7yrsyngm
MD5

27cd44d454364f2d822eaace466fed38
SHA1

3019af2f3dd3d2de1c101be8d92c27fd25c40e5b
SHA256

3a9837b6435b62d0caeac4c051bfd5f640fc8cfefb0d6090743b6290f4b3648d
SHA512

2ff8c1e56e3dc0f2e576af34b0ebb1041563b5f12d19a38c112f107090d6051deed5d35f42189858cae4d5140cf062e99c9ce3defc0997a9ff71afff140446d2
SSDEEP

12288:uFUNDat1JSgyPzsB7kmIFZUUvHqnuFT+wUV5/ZhReTr6dARuYKpQZ8gZ5NOij:uFOa/0BG9gGUvH+uwwsqtOij

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  3a9837b6435b62d0caeac4c051bfd5f640fc8cfefb0d6090743b6290f4b3648d
- Size
  
  767KB
- MD5
  
  27cd44d454364f2d822eaace466fed38
- SHA1
  
  3019af2f3dd3d2de1c101be8d92c27fd25c40e5b
- SHA256
  
  3a9837b6435b62d0caeac4c051bfd5f640fc8cfefb0d6090743b6290f4b3648d
- SHA512
  
  2ff8c1e56e3dc0f2e576af34b0ebb1041563b5f12d19a38c112f107090d6051deed5d35f42189858cae4d5140cf062e99c9ce3defc0997a9ff71afff140446d2
- SSDEEP
  
  12288:uFUNDat1JSgyPzsB7kmIFZUUvHqnuFT+wUV5/ZhReTr6dARuYKpQZ8gZ5NOij:uFOa/0BG9gGUvH+uwwsqtOij
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence