66eeb0dd91a5264ace5c37d277c624528d2086576f9525191c565d532f338787 | Triage

Sharing

General

Target

66eeb0dd91a5264ace5c37d277c624528d2086576f9525191c565d532f338787N.exe
Size

204KB
Sample

241122-w17jcs1qcm
MD5

72d7ce61d2af7c34fb68db3f73feec80
SHA1

2b1d7c784b49b4a3622d736778371c267426d544
SHA256

66eeb0dd91a5264ace5c37d277c624528d2086576f9525191c565d532f338787
SHA512

684e93654d796aee086f8ce11924d4616fc68f72fdb3b1fa72ea5661c71038b12fe2966d1807d70e108f365805526cd677314b030305067d5a1276cbc0da7b08
SSDEEP

3072:9mQW8H0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWZe:Elw4QxL7B9W0c1RCzR/fSmlv

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  66eeb0dd91a5264ace5c37d277c624528d2086576f9525191c565d532f338787N.exe
- Size
  
  204KB
- MD5
  
  72d7ce61d2af7c34fb68db3f73feec80
- SHA1
  
  2b1d7c784b49b4a3622d736778371c267426d544
- SHA256
  
  66eeb0dd91a5264ace5c37d277c624528d2086576f9525191c565d532f338787
- SHA512
  
  684e93654d796aee086f8ce11924d4616fc68f72fdb3b1fa72ea5661c71038b12fe2966d1807d70e108f365805526cd677314b030305067d5a1276cbc0da7b08
- SSDEEP
  
  3072:9mQW8H0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWZe:Elw4QxL7B9W0c1RCzR/fSmlv
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence