General

  • Target

    79ae89733257378139cf3bdce3a30802818ca1a12bb2343e0b9d0f51f8af1f10

  • Size

    4.6MB

  • Sample

    221004-v6nsrscaam

  • MD5

    fe1de0acb3aa75f88f61a784288a32d1

  • SHA1

    d973f591f56c3d53aac4e2da4a3eede185c910d9

  • SHA256

    79ae89733257378139cf3bdce3a30802818ca1a12bb2343e0b9d0f51f8af1f10

  • SHA512

    084770ea021d7d52b50228d1ca6277a9fb5880ae22378c297d24b4bccaca7919a207954350f3257485c010ec0c0cdc6e6548a2508bba1e090647465aa160cf7e

  • SSDEEP

    98304:8SiST7jl7LSogkhoBJ96U0K2nNY0UaVnPcMf:HlSorkKd5NYJ0cq

Malware Config

Targets

    • Target

      79ae89733257378139cf3bdce3a30802818ca1a12bb2343e0b9d0f51f8af1f10

    • Size

      4.6MB

    • MD5

      fe1de0acb3aa75f88f61a784288a32d1

    • SHA1

      d973f591f56c3d53aac4e2da4a3eede185c910d9

    • SHA256

      79ae89733257378139cf3bdce3a30802818ca1a12bb2343e0b9d0f51f8af1f10

    • SHA512

      084770ea021d7d52b50228d1ca6277a9fb5880ae22378c297d24b4bccaca7919a207954350f3257485c010ec0c0cdc6e6548a2508bba1e090647465aa160cf7e

    • SSDEEP

      98304:8SiST7jl7LSogkhoBJ96U0K2nNY0UaVnPcMf:HlSorkKd5NYJ0cq

    • Babadeda

      Babadeda is a crypter delivered as a legitimate installer and used to drop other malware families.

    • Babadeda Crypter

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Peripheral Device Discovery

1
T1120

Tasks