f53f7495b072ccf9680d83825ecf7aa12164ae781c46f76f5a376fe279f77826 | Triage

Sharing

General

Target

f53f7495b072ccf9680d83825ecf7aa12164ae781c46f76f5a376fe279f77826.exe
Size

52KB
Sample

241122-lh1b8ayjh1
MD5

7ae3de44f03cf6217d606e9a63cb0169
SHA1

b51e6b1bafa72ceb694da2ac7340066794d857e0
SHA256

f53f7495b072ccf9680d83825ecf7aa12164ae781c46f76f5a376fe279f77826
SHA512

326167886d3cd06b07918a2dbb1dbcf3c12e787e6adeb3b815b1b76ae105f89817e6136c8dd214a0bb3e8527e945f9855b0d8f57737fa0c8c6844e3ce57eb665
SSDEEP

768:PuWnCwQ1HqVgPyks7rt1jskr/v/m89S3rkC6R+wibw52Tzp+2:Pm9qVgP0hNskr3mbkC6R+Xp+2

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  f53f7495b072ccf9680d83825ecf7aa12164ae781c46f76f5a376fe279f77826.exe
- Size
  
  52KB
- MD5
  
  7ae3de44f03cf6217d606e9a63cb0169
- SHA1
  
  b51e6b1bafa72ceb694da2ac7340066794d857e0
- SHA256
  
  f53f7495b072ccf9680d83825ecf7aa12164ae781c46f76f5a376fe279f77826
- SHA512
  
  326167886d3cd06b07918a2dbb1dbcf3c12e787e6adeb3b815b1b76ae105f89817e6136c8dd214a0bb3e8527e945f9855b0d8f57737fa0c8c6844e3ce57eb665
- SSDEEP
  
  768:PuWnCwQ1HqVgPyks7rt1jskr/v/m89S3rkC6R+wibw52Tzp+2:Pm9qVgP0hNskr3mbkC6R+Xp+2
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence