154fa8e679e3c1236c5bca6b7597cef767e7a856146cf28ac3cb801b77e188fc | Triage

Sharing

General

Target

154fa8e679e3c1236c5bca6b7597cef767e7a856146cf28ac3cb801b77e188fc
Size

33KB
Sample

221020-bctblsfhhk
MD5

5d1eaeb4ccd5cfda05163cdb88a3e9aa
SHA1

4547cbb3f56d74800433a9fd5bff3c162745f1ce
SHA256

154fa8e679e3c1236c5bca6b7597cef767e7a856146cf28ac3cb801b77e188fc
SHA512

49273f57b98c382715fdc04ec2ee89bf10104f8a55efee49a0c3275a97076917c8358b30dc3a04212b4aaea2c9d0b368b9553858ec3256bce242be6b76af4630
SSDEEP

768:0ex2ZFuS3P4OjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8Oog+favSti:0eqPjXRrs9sINeZEtejlIkoLN127BFVI

Score

8^/10

Malware Config

Targets

- Target
  
  154fa8e679e3c1236c5bca6b7597cef767e7a856146cf28ac3cb801b77e188fc
- Size
  
  33KB
- MD5
  
  5d1eaeb4ccd5cfda05163cdb88a3e9aa
- SHA1
  
  4547cbb3f56d74800433a9fd5bff3c162745f1ce
- SHA256
  
  154fa8e679e3c1236c5bca6b7597cef767e7a856146cf28ac3cb801b77e188fc
- SHA512
  
  49273f57b98c382715fdc04ec2ee89bf10104f8a55efee49a0c3275a97076917c8358b30dc3a04212b4aaea2c9d0b368b9553858ec3256bce242be6b76af4630
- SSDEEP
  
  768:0ex2ZFuS3P4OjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8Oog+favSti:0eqPjXRrs9sINeZEtejlIkoLN127BFVI
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2