daed0c1465f04ee14cd180133751b1a10c1cda35ea7f356b25bc3a8657a1dfbb | Triage

Sharing

General

Target

daed0c1465f04ee14cd180133751b1a10c1cda35ea7f356b25bc3a8657a1dfbb
Size

628KB
Sample

221123-ve9wxsgh44
MD5

2e72acda3efa39a7ddf7ead3c0683c55
SHA1

5d9db7fe598a3e0465687c50dbae257d6e8e44f3
SHA256

daed0c1465f04ee14cd180133751b1a10c1cda35ea7f356b25bc3a8657a1dfbb
SHA512

8e188d01000aa1c58ca2e3cabefef41408360a3f2570595ca23d2ecdf82009d3a8964b7648a5321c3f13f8ef5100f16e6db7d7b67555a403d6aa3214444ee76b
SSDEEP

6144:Ik0E+i8egVWr8+Qcg0lOeW4woaBwzC1Ia97hwSqn2jK0Pp8DZ/EeY014HNjatshw:Ik05xEb9VIetwMQqaLieOtshidFP8jI

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  daed0c1465f04ee14cd180133751b1a10c1cda35ea7f356b25bc3a8657a1dfbb
- Size
  
  628KB
- MD5
  
  2e72acda3efa39a7ddf7ead3c0683c55
- SHA1
  
  5d9db7fe598a3e0465687c50dbae257d6e8e44f3
- SHA256
  
  daed0c1465f04ee14cd180133751b1a10c1cda35ea7f356b25bc3a8657a1dfbb
- SHA512
  
  8e188d01000aa1c58ca2e3cabefef41408360a3f2570595ca23d2ecdf82009d3a8964b7648a5321c3f13f8ef5100f16e6db7d7b67555a403d6aa3214444ee76b
- SSDEEP
  
  6144:Ik0E+i8egVWr8+Qcg0lOeW4woaBwzC1Ia97hwSqn2jK0Pp8DZ/EeY014HNjatshw:Ik05xEb9VIetwMQqaLieOtshidFP8jI
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
- Checks for any installed AV software in registry
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Security Software Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2