42c14306c9024c45c82f1262e038ce1eb9f4f134249ca41091604a23c9e41710 | Triage

Sharing

General

Target

42c14306c9024c45c82f1262e038ce1eb9f4f134249ca41091604a23c9e41710
Size

128KB
Sample

221003-emta5sgffn
MD5

6c521dd1853c852df40a1c167620a5db
SHA1

d98dbf84f45ceac48d0610c3d5345183b6b50c16
SHA256

42c14306c9024c45c82f1262e038ce1eb9f4f134249ca41091604a23c9e41710
SHA512

af24cc3e1bdd55987ec2a9d9fb4ebc39d620f07df72c42b96c8ac21e13cbeb9d2195bd2a00ebbeafdcae20e4dc884d2d88886dad1dff6135aa4da251e74f62f4
SSDEEP

3072:V9HfSoLewfmay1h4u1KS5jSfi10aJMCs:3HqoKORng1SK10/

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  42c14306c9024c45c82f1262e038ce1eb9f4f134249ca41091604a23c9e41710
- Size
  
  128KB
- MD5
  
  6c521dd1853c852df40a1c167620a5db
- SHA1
  
  d98dbf84f45ceac48d0610c3d5345183b6b50c16
- SHA256
  
  42c14306c9024c45c82f1262e038ce1eb9f4f134249ca41091604a23c9e41710
- SHA512
  
  af24cc3e1bdd55987ec2a9d9fb4ebc39d620f07df72c42b96c8ac21e13cbeb9d2195bd2a00ebbeafdcae20e4dc884d2d88886dad1dff6135aa4da251e74f62f4
- SSDEEP
  
  3072:V9HfSoLewfmay1h4u1KS5jSfi10aJMCs:3HqoKORng1SK10/
Score

10^/10

evasion
- Modifies firewall policy service
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2