General
-
Target
2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9.exe
-
Size
56KB
-
Sample
241122-jafazawpc1
-
MD5
5d84a0d28bf422da4d26699050c71c96
-
SHA1
9cec12b9238d41538f615179751b4b34fe2c8fe0
-
SHA256
2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9
-
SHA512
8f4767f6fde9fe65147309420c8c5949bc1c1e7d7e14a6d4194ce3401ad42720dbf66e797af68fce9839421e589c4ca9db46bca677c5c52cbdfc379231fba438
-
SSDEEP
1536:SGgcXJQgnRt9UdLw6BNMyBhXZxHJ6P6D5bPt:Kgz07JjD5bPt
Static task
static1
Behavioral task
behavioral1
Sample
2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9.exe
-
Size
56KB
-
MD5
5d84a0d28bf422da4d26699050c71c96
-
SHA1
9cec12b9238d41538f615179751b4b34fe2c8fe0
-
SHA256
2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9
-
SHA512
8f4767f6fde9fe65147309420c8c5949bc1c1e7d7e14a6d4194ce3401ad42720dbf66e797af68fce9839421e589c4ca9db46bca677c5c52cbdfc379231fba438
-
SSDEEP
1536:SGgcXJQgnRt9UdLw6BNMyBhXZxHJ6P6D5bPt:Kgz07JjD5bPt
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2