9acb4107fc42340085b92b61623f241b3b87136e167e8e22bc3c1467bd2c1380 | Triage

Sharing

General

Target

9acb4107fc42340085b92b61623f241b3b87136e167e8e22bc3c1467bd2c1380
Size

392KB
Sample

221002-2wcq3sffdk
MD5

09700f2ed192a2f28154d4e9433b8da0
SHA1

75c76b59c334009ba48f3d567eea7d13c0f8d051
SHA256

9acb4107fc42340085b92b61623f241b3b87136e167e8e22bc3c1467bd2c1380
SHA512

ae4f8acb3aaeca54b237414afac403433d786fa525ebd481c14ae6e1af0f6f14a3baae9cc3904c797a260174e54416467439a02d40363ceace07c5e0380c2b81
SSDEEP

12288:+t8vVED3Bk0Mr9Vif7/F1hIIaYHuvAIS2x:+t+gvMpVij/F1hV5HuvAIr

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  9acb4107fc42340085b92b61623f241b3b87136e167e8e22bc3c1467bd2c1380
- Size
  
  392KB
- MD5
  
  09700f2ed192a2f28154d4e9433b8da0
- SHA1
  
  75c76b59c334009ba48f3d567eea7d13c0f8d051
- SHA256
  
  9acb4107fc42340085b92b61623f241b3b87136e167e8e22bc3c1467bd2c1380
- SHA512
  
  ae4f8acb3aaeca54b237414afac403433d786fa525ebd481c14ae6e1af0f6f14a3baae9cc3904c797a260174e54416467439a02d40363ceace07c5e0380c2b81
- SSDEEP
  
  12288:+t8vVED3Bk0Mr9Vif7/F1hIIaYHuvAIS2x:+t+gvMpVij/F1hV5HuvAIr
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2