b2bd1de24ee6827c7ce725b074d65351998f67643b7574fd059d49176f22e7b6 | Triage

Sharing

General

Target

b2bd1de24ee6827c7ce725b074d65351998f67643b7574fd059d49176f22e7b6
Size

990KB
Sample

221029-mbt3ascggq
MD5

0915d8f3daac1432d07ea27b3b5be7fc
SHA1

cb4c2c45fa6ff37f9ef74a60e51874f5d2f5a2d4
SHA256

b2bd1de24ee6827c7ce725b074d65351998f67643b7574fd059d49176f22e7b6
SHA512

fcd9bcfc42537bdac2a6506ac415613bd09bcf6ff3f87e08ac37baf95c607badc6c8c652696a86419e619405fd6430c7f8fe915b87fbb16496dcda33ef21bb78
SSDEEP

24576:Etb20pkaCqT5TBWgNQ7aLb0r6e0Vp1aAZ6A:tVg5tQ7af0r6e0pc65

Score

7^/10

Malware Config

Targets

- Target
  
  b2bd1de24ee6827c7ce725b074d65351998f67643b7574fd059d49176f22e7b6
- Size
  
  990KB
- MD5
  
  0915d8f3daac1432d07ea27b3b5be7fc
- SHA1
  
  cb4c2c45fa6ff37f9ef74a60e51874f5d2f5a2d4
- SHA256
  
  b2bd1de24ee6827c7ce725b074d65351998f67643b7574fd059d49176f22e7b6
- SHA512
  
  fcd9bcfc42537bdac2a6506ac415613bd09bcf6ff3f87e08ac37baf95c607badc6c8c652696a86419e619405fd6430c7f8fe915b87fbb16496dcda33ef21bb78
- SSDEEP
  
  24576:Etb20pkaCqT5TBWgNQ7aLb0r6e0Vp1aAZ6A:tVg5tQ7af0r6e0pc65
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2