021c586a2cd7d499d6ad5cf59e8f0d5d2babea0a061bb05e3ba07acd24adf8c0 | Triage

Sharing

General

Target

021c586a2cd7d499d6ad5cf59e8f0d5d2babea0a061bb05e3ba07acd24adf8c0
Size

68KB
Sample

221128-bh6h5aha7w
MD5

a104334f091fba128807dcf115819720
SHA1

ab4dee275193e7a0f2a19f71cfc6d0f69692f424
SHA256

021c586a2cd7d499d6ad5cf59e8f0d5d2babea0a061bb05e3ba07acd24adf8c0
SHA512

bda7359cc600a26a40f252ff52f36a83605de71adef15c87c4a0fb4cfb5d2f2b1ae633b4549aceaedfa6a69101bdab32571bea2eb283f553a14ae2faf036e34e
SSDEEP

768:rdsv/UDO00cfykvw8qqOve3ZVrt2F0mv9PIKr5LQ6hZDyVYUv5m/668OWQHYNnds:qeO00cdVrMFjdF5L7hov5Ex4Br+KkCKT

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  021c586a2cd7d499d6ad5cf59e8f0d5d2babea0a061bb05e3ba07acd24adf8c0
- Size
  
  68KB
- MD5
  
  a104334f091fba128807dcf115819720
- SHA1
  
  ab4dee275193e7a0f2a19f71cfc6d0f69692f424
- SHA256
  
  021c586a2cd7d499d6ad5cf59e8f0d5d2babea0a061bb05e3ba07acd24adf8c0
- SHA512
  
  bda7359cc600a26a40f252ff52f36a83605de71adef15c87c4a0fb4cfb5d2f2b1ae633b4549aceaedfa6a69101bdab32571bea2eb283f553a14ae2faf036e34e
- SSDEEP
  
  768:rdsv/UDO00cfykvw8qqOve3ZVrt2F0mv9PIKr5LQ6hZDyVYUv5m/668OWQHYNnds:qeO00cdVrMFjdF5L7hov5Ex4Br+KkCKT
Score

10^/10

persistence
- Modifies system executable filetype association
  persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Change Default File Association

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2