b7e807aed17c799c9b49df3da742aa3dfbae077c090c3ea0c0b5d8abe4de081b | Triage

Sharing

General

Target

b7e807aed17c799c9b49df3da742aa3dfbae077c090c3ea0c0b5d8abe4de081b.exe
Size

304KB
Sample

241122-xajv2ssjaj
MD5

2d401987cfffde6bd6ba0901876ca1a5
SHA1

609ca473a5e1e3763984ee5c592d136c2f1e4c92
SHA256

b7e807aed17c799c9b49df3da742aa3dfbae077c090c3ea0c0b5d8abe4de081b
SHA512

ca8257d236b7e52677145343bbde7d9eba8cf4d076e214a881affd4feacd50e67810a6c6c2038588f0f0c5d459ac9e68f36361c52553912d2192103007ec13d3
SSDEEP

3072:sPGOaEaAaTG0kZSmA2m/xqc+TjGHMop2aEaLFra+7pvPSvB9G:J4AdJI6HylaRSm

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  b7e807aed17c799c9b49df3da742aa3dfbae077c090c3ea0c0b5d8abe4de081b.exe
- Size
  
  304KB
- MD5
  
  2d401987cfffde6bd6ba0901876ca1a5
- SHA1
  
  609ca473a5e1e3763984ee5c592d136c2f1e4c92
- SHA256
  
  b7e807aed17c799c9b49df3da742aa3dfbae077c090c3ea0c0b5d8abe4de081b
- SHA512
  
  ca8257d236b7e52677145343bbde7d9eba8cf4d076e214a881affd4feacd50e67810a6c6c2038588f0f0c5d459ac9e68f36361c52553912d2192103007ec13d3
- SSDEEP
  
  3072:sPGOaEaAaTG0kZSmA2m/xqc+TjGHMop2aEaLFra+7pvPSvB9G:J4AdJI6HylaRSm
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence