ca32125e471b4abe832729dce8b22a3705355972f79b330c3c77abadcc6c6335 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca32125e471b4abe832729dce8b22a3705355972f79b330c3c77abadcc6c6335
Size

20KB
Sample

221030-h7rjtsacbj
MD5

a2ff2dd6305264db1f4473cb50d77670
SHA1

eee7656ea6f5d39019ec5ebe9ddb338710ba8b96
SHA256

ca32125e471b4abe832729dce8b22a3705355972f79b330c3c77abadcc6c6335
SHA512

523c15f9d2edbbdf390837bf88cd70c5cd63cd49bcb531dd83f0c1c665f39ae655c3d788f0febd0c8bdb439555a19ea9815a39fc13c733dc1973dabb2c660ee8
SSDEEP

384:fY/7iMmQgVC+02JWuCSPmSQTebw/UqFPgh4oH9KkMA:y12JTPRQTeZq1ghEkMA

Score

8^/10

Malware Config

Targets

- Target
  
  ca32125e471b4abe832729dce8b22a3705355972f79b330c3c77abadcc6c6335
- Size
  
  20KB
- MD5
  
  a2ff2dd6305264db1f4473cb50d77670
- SHA1
  
  eee7656ea6f5d39019ec5ebe9ddb338710ba8b96
- SHA256
  
  ca32125e471b4abe832729dce8b22a3705355972f79b330c3c77abadcc6c6335
- SHA512
  
  523c15f9d2edbbdf390837bf88cd70c5cd63cd49bcb531dd83f0c1c665f39ae655c3d788f0febd0c8bdb439555a19ea9815a39fc13c733dc1973dabb2c660ee8
- SSDEEP
  
  384:fY/7iMmQgVC+02JWuCSPmSQTebw/UqFPgh4oH9KkMA:y12JTPRQTeZq1ghEkMA
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2