cf2014354f081d5e3d8e346b1fc2b43ebf6419e1a511bfb2054fe1cd52836a5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf2014354f081d5e3d8e346b1fc2b43ebf6419e1a511bfb2054fe1cd52836a5b
Size

224KB
Sample

221030-hwpk4agfb3
MD5

a275add6c247406cef1aeb331ccd7ebf
SHA1

1dbcf27786db2ed6ce94e4819d3eb599a27b6e0c
SHA256

cf2014354f081d5e3d8e346b1fc2b43ebf6419e1a511bfb2054fe1cd52836a5b
SHA512

b0f2a1463e89c7688d05c4a8e87eca720ed6d952f71698cb0a3eea7e312957e944ada094f9cc36f5c79d504045f95cf847379f6f67e17c8f497ccc7232604796
SSDEEP

3072:G+DKY0ODn3vACrhCjG8G3GbGVGBGfGuGxGWYcrf6KadU:G+eY0ODf/rAYcD6Kad

Score

8^/10

Malware Config

Targets

- Target
  
  cf2014354f081d5e3d8e346b1fc2b43ebf6419e1a511bfb2054fe1cd52836a5b
- Size
  
  224KB
- MD5
  
  a275add6c247406cef1aeb331ccd7ebf
- SHA1
  
  1dbcf27786db2ed6ce94e4819d3eb599a27b6e0c
- SHA256
  
  cf2014354f081d5e3d8e346b1fc2b43ebf6419e1a511bfb2054fe1cd52836a5b
- SHA512
  
  b0f2a1463e89c7688d05c4a8e87eca720ed6d952f71698cb0a3eea7e312957e944ada094f9cc36f5c79d504045f95cf847379f6f67e17c8f497ccc7232604796
- SSDEEP
  
  3072:G+DKY0ODn3vACrhCjG8G3GbGVGBGfGuGxGWYcrf6KadU:G+eY0ODf/rAYcD6Kad
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2