99cdbdc625bf76651fd4e20ab57cda4d51e3edcbd164ef30dec6639b2efd1d7d | Triage

Sharing

General

Target

99cdbdc625bf76651fd4e20ab57cda4d51e3edcbd164ef30dec6639b2efd1d7d
Size

19KB
Sample

221123-xp13waaf6s
MD5

4a42cf14c0b527c279bbc2e0c0d85830
SHA1

705e83da26f6608f12b23fe750667eff30c69947
SHA256

99cdbdc625bf76651fd4e20ab57cda4d51e3edcbd164ef30dec6639b2efd1d7d
SHA512

2835b4ba02eb2d2fc4aa391cd5221775951762b8ea730ccda51f63610dcc82bfefd44ad8eb1a6753a3f6d1d0473ca5b8d66c5ce76afcf9c69dce51e957fcf2cb
SSDEEP

192:uXy4Rmi6ENEAk5Vgg5GQ8b1wN/A9iZbIcFHrY9W14APTK7YySJABJN55Ovr:uX5vK5D78BwN/xrF8PMcYySJkJNcr

Score

8^/10

Malware Config

Targets

- Target
  
  99cdbdc625bf76651fd4e20ab57cda4d51e3edcbd164ef30dec6639b2efd1d7d
- Size
  
  19KB
- MD5
  
  4a42cf14c0b527c279bbc2e0c0d85830
- SHA1
  
  705e83da26f6608f12b23fe750667eff30c69947
- SHA256
  
  99cdbdc625bf76651fd4e20ab57cda4d51e3edcbd164ef30dec6639b2efd1d7d
- SHA512
  
  2835b4ba02eb2d2fc4aa391cd5221775951762b8ea730ccda51f63610dcc82bfefd44ad8eb1a6753a3f6d1d0473ca5b8d66c5ce76afcf9c69dce51e957fcf2cb
- SSDEEP
  
  192:uXy4Rmi6ENEAk5Vgg5GQ8b1wN/A9iZbIcFHrY9W14APTK7YySJABJN55Ovr:uX5vK5D78BwN/xrF8PMcYySJkJNcr
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2