f9e3fc85d1dc4ccd69fe85d125cc6269af8fc86a877f27484525d368c15f97aa | Triage

Sharing

General

Target

f9e3fc85d1dc4ccd69fe85d125cc6269af8fc86a877f27484525d368c15f97aa.exe
Size

48KB
Sample

241122-rc27hssjft
MD5

c1d3d2bb476dbe351c4f99578a0d4769
SHA1

4b083a6fa91ea465b244f396d8fe5f2a65a8aae1
SHA256

f9e3fc85d1dc4ccd69fe85d125cc6269af8fc86a877f27484525d368c15f97aa
SHA512

2390fa1c35baddf69a572c538a49aad994d1770172b8544ad07724b7581a2ad986925491296f69457d4908850589f46961788bcc7fdf65a1897cc4f7f9c796d9
SSDEEP

768:qdhIN0XbRedKu1QeGTwK0NHXsH6bJCYhx8HV0kvcUwSuUCw3+MKh:qdjQKpHTwKqWAxcpvcqu74+Jh

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  f9e3fc85d1dc4ccd69fe85d125cc6269af8fc86a877f27484525d368c15f97aa.exe
- Size
  
  48KB
- MD5
  
  c1d3d2bb476dbe351c4f99578a0d4769
- SHA1
  
  4b083a6fa91ea465b244f396d8fe5f2a65a8aae1
- SHA256
  
  f9e3fc85d1dc4ccd69fe85d125cc6269af8fc86a877f27484525d368c15f97aa
- SHA512
  
  2390fa1c35baddf69a572c538a49aad994d1770172b8544ad07724b7581a2ad986925491296f69457d4908850589f46961788bcc7fdf65a1897cc4f7f9c796d9
- SSDEEP
  
  768:qdhIN0XbRedKu1QeGTwK0NHXsH6bJCYhx8HV0kvcUwSuUCw3+MKh:qdjQKpHTwKqWAxcpvcqu74+Jh
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence