2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9 | Triage

Sharing

General

Target

2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9.exe
Size

56KB
Sample

241122-jafazawpc1
MD5

5d84a0d28bf422da4d26699050c71c96
SHA1

9cec12b9238d41538f615179751b4b34fe2c8fe0
SHA256

2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9
SHA512

8f4767f6fde9fe65147309420c8c5949bc1c1e7d7e14a6d4194ce3401ad42720dbf66e797af68fce9839421e589c4ca9db46bca677c5c52cbdfc379231fba438
SSDEEP

1536:SGgcXJQgnRt9UdLw6BNMyBhXZxHJ6P6D5bPt:Kgz07JjD5bPt

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9.exe
- Size
  
  56KB
- MD5
  
  5d84a0d28bf422da4d26699050c71c96
- SHA1
  
  9cec12b9238d41538f615179751b4b34fe2c8fe0
- SHA256
  
  2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9
- SHA512
  
  8f4767f6fde9fe65147309420c8c5949bc1c1e7d7e14a6d4194ce3401ad42720dbf66e797af68fce9839421e589c4ca9db46bca677c5c52cbdfc379231fba438
- SSDEEP
  
  1536:SGgcXJQgnRt9UdLw6BNMyBhXZxHJ6P6D5bPt:Kgz07JjD5bPt
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence