cb729fff42104c50c867dbcdb48a826a2e5cfdac82007b16c31b4e53f2860d3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb729fff42104c50c867dbcdb48a826a2e5cfdac82007b16c31b4e53f2860d3c
Size

281KB
Sample

220919-pam9gabhdj
MD5

1ab989841d44f87771e335ff22bb53f3
SHA1

8e7ffeb1bb5dba1b76002c46aca03574b861ef73
SHA256

cb729fff42104c50c867dbcdb48a826a2e5cfdac82007b16c31b4e53f2860d3c
SHA512

32e5cf8fb7af8220ac26cbe786d4ffb3dfbb058731221f73f3cd1e854bc60e03022e52ac2c05f0232fcaef58d20239faf35cb1808cd42f11ba2b45a107772a06
SSDEEP

6144:V5Ng3zC7e0mOgBCmlK1qoV90ylC8lyhD8kBoi7MK/U:V5N4b0mlBCJ1H9ZlHlo5oic

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  cb729fff42104c50c867dbcdb48a826a2e5cfdac82007b16c31b4e53f2860d3c
- Size
  
  281KB
- MD5
  
  1ab989841d44f87771e335ff22bb53f3
- SHA1
  
  8e7ffeb1bb5dba1b76002c46aca03574b861ef73
- SHA256
  
  cb729fff42104c50c867dbcdb48a826a2e5cfdac82007b16c31b4e53f2860d3c
- SHA512
  
  32e5cf8fb7af8220ac26cbe786d4ffb3dfbb058731221f73f3cd1e854bc60e03022e52ac2c05f0232fcaef58d20239faf35cb1808cd42f11ba2b45a107772a06
- SSDEEP
  
  6144:V5Ng3zC7e0mOgBCmlK1qoV90ylC8lyhD8kBoi7MK/U:V5N4b0mlBCJ1H9ZlHlo5oic
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2