cdf8e50e8181aafe210944f84eaea8e54dc9024a09683292d66b4ec3314b9908 | Triage

Sharing

General

Target

cdf8e50e8181aafe210944f84eaea8e54dc9024a09683292d66b4ec3314b9908
Size

797KB
Sample

221123-tbtj4agf7x
MD5

25463ec11b0bbb41434e341f635ea57c
SHA1

bff9fb76cdf9a7ab99caa49f34a0a32a22f815f7
SHA256

cdf8e50e8181aafe210944f84eaea8e54dc9024a09683292d66b4ec3314b9908
SHA512

7c64ddcd1a581bb0df2daad1f8eb011939f549ec18ff86d41bac484ad9e4036be863c6d3053df8790d86369c7ea02d921e210fa4129a2a792c8111ef08c8c317
SSDEEP

12288:0i6URcrZOvslozQHf6OWRrrb6IGbHnfErt7ouN/eqpcNoYx2eh:o6OE+IGbyt794ht2eh

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  cdf8e50e8181aafe210944f84eaea8e54dc9024a09683292d66b4ec3314b9908
- Size
  
  797KB
- MD5
  
  25463ec11b0bbb41434e341f635ea57c
- SHA1
  
  bff9fb76cdf9a7ab99caa49f34a0a32a22f815f7
- SHA256
  
  cdf8e50e8181aafe210944f84eaea8e54dc9024a09683292d66b4ec3314b9908
- SHA512
  
  7c64ddcd1a581bb0df2daad1f8eb011939f549ec18ff86d41bac484ad9e4036be863c6d3053df8790d86369c7ea02d921e210fa4129a2a792c8111ef08c8c317
- SSDEEP
  
  12288:0i6URcrZOvslozQHf6OWRrrb6IGbHnfErt7ouN/eqpcNoYx2eh:o6OE+IGbyt794ht2eh
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2