553ce861b84e1d0f1fbb2eec6eb845739e8dd66abea02deb11cbb77c0d4bb6d1 | Triage

Sharing

General

Target

553ce861b84e1d0f1fbb2eec6eb845739e8dd66abea02deb11cbb77c0d4bb6d1.exe
Size

235KB
Sample

241121-mxhamawkgl
MD5

a81e449f4066a477b3e5d1ae70c3ac51
SHA1

bb3a50b323dbd68f4c4c42779654ddf5f478434d
SHA256

553ce861b84e1d0f1fbb2eec6eb845739e8dd66abea02deb11cbb77c0d4bb6d1
SHA512

f12d08c76a3970caf94cd016836502e8adcaaea23199e077f988fcc56c4efa5acce0a3da2a74c7927d40507fb99a15e08949688647aead87666784a1e2ebc704
SSDEEP

3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8zkgnYHfQ2kF:o68i3odBiTl2+TCU/0k8KfQ2k8E

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  553ce861b84e1d0f1fbb2eec6eb845739e8dd66abea02deb11cbb77c0d4bb6d1.exe
- Size
  
  235KB
- MD5
  
  a81e449f4066a477b3e5d1ae70c3ac51
- SHA1
  
  bb3a50b323dbd68f4c4c42779654ddf5f478434d
- SHA256
  
  553ce861b84e1d0f1fbb2eec6eb845739e8dd66abea02deb11cbb77c0d4bb6d1
- SHA512
  
  f12d08c76a3970caf94cd016836502e8adcaaea23199e077f988fcc56c4efa5acce0a3da2a74c7927d40507fb99a15e08949688647aead87666784a1e2ebc704
- SSDEEP
  
  3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8zkgnYHfQ2kF:o68i3odBiTl2+TCU/0k8KfQ2k8E
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence