44a918618308cda46d5ff3207f2f9bd5924580a060f60ce11162ed341776a2af | Triage

Sharing

General

Target

44a918618308cda46d5ff3207f2f9bd5924580a060f60ce11162ed341776a2af.exe
Size

32KB
Sample

241122-qylwzs1qcz
MD5

f548aaff8f6009b974ed581ab2e89fca
SHA1

4afe0172273df05630ceab21d879c1d598b3d95a
SHA256

44a918618308cda46d5ff3207f2f9bd5924580a060f60ce11162ed341776a2af
SHA512

0c95d5cb8d08364f3fadb87c127235faa721a8eda3a88f9fa4d3b1891f9ee1f94d727116fbc0ddab6dc8d64086ae0302497945964fa7b00e87d4e760a511b12e
SSDEEP

768:peahIdmVIBW+nvmPPPPPPPPPPPPPPPPPPPPPFPPPPPPVe7YoR/15oB19mPHXRHr6:pPhIdmVIBW+vmPPPPPPPPPPPPPPPPPPd

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  44a918618308cda46d5ff3207f2f9bd5924580a060f60ce11162ed341776a2af.exe
- Size
  
  32KB
- MD5
  
  f548aaff8f6009b974ed581ab2e89fca
- SHA1
  
  4afe0172273df05630ceab21d879c1d598b3d95a
- SHA256
  
  44a918618308cda46d5ff3207f2f9bd5924580a060f60ce11162ed341776a2af
- SHA512
  
  0c95d5cb8d08364f3fadb87c127235faa721a8eda3a88f9fa4d3b1891f9ee1f94d727116fbc0ddab6dc8d64086ae0302497945964fa7b00e87d4e760a511b12e
- SSDEEP
  
  768:peahIdmVIBW+nvmPPPPPPPPPPPPPPPPPPPPPFPPPPPPVe7YoR/15oB19mPHXRHr6:pPhIdmVIBW+vmPPPPPPPPPPPPPPPPPPd
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence