2cd58fe6356962d493074c403480143a8aaa10e0d2aa9850464bc5b61ff5bab1 | Triage

Sharing

General

Target

2cd58fe6356962d493074c403480143a8aaa10e0d2aa9850464bc5b61ff5bab1
Size

768KB
Sample

221121-svmp8afd79
MD5

22df29ca44e19211d3630e84ec0eeb01
SHA1

ae81fa6e0f616f8c1ff8c284d793bd2b057bfd9e
SHA256

2cd58fe6356962d493074c403480143a8aaa10e0d2aa9850464bc5b61ff5bab1
SHA512

4800b4275499b068ab2f4cebc6ed9e58f9dcd5955d2321b5e048e349c6ab2b501a8bed146fdf2cb60c39820676161ef7f39bf5c758455f27fb6383713004a59d
SSDEEP

12288:RCRSvpzh90Dft/dVYkk0DmPN7Z4AxH5t24VFLlfVoDh1ewE2HmwWqzIxLJIdT/Ps:RCRIpre/dVYw6YAF24Hmh1a2Gwxzq

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  2cd58fe6356962d493074c403480143a8aaa10e0d2aa9850464bc5b61ff5bab1
- Size
  
  768KB
- MD5
  
  22df29ca44e19211d3630e84ec0eeb01
- SHA1
  
  ae81fa6e0f616f8c1ff8c284d793bd2b057bfd9e
- SHA256
  
  2cd58fe6356962d493074c403480143a8aaa10e0d2aa9850464bc5b61ff5bab1
- SHA512
  
  4800b4275499b068ab2f4cebc6ed9e58f9dcd5955d2321b5e048e349c6ab2b501a8bed146fdf2cb60c39820676161ef7f39bf5c758455f27fb6383713004a59d
- SSDEEP
  
  12288:RCRSvpzh90Dft/dVYkk0DmPN7Z4AxH5t24VFLlfVoDh1ewE2HmwWqzIxLJIdT/Ps:RCRIpre/dVYw6YAF24Hmh1a2Gwxzq
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2