8589f3241162d90ad2be553b5fe6888bbcd68680c4f491aac4aee40fe7fd384d | Triage

Sharing

General

Target

8589f3241162d90ad2be553b5fe6888bbcd68680c4f491aac4aee40fe7fd384d
Size

109KB
Sample

221128-c7sh8sde6y
MD5

2cc89125f41c7f0b43a2270bab95f59b
SHA1

52872c01673f3de64f2abcb038bd2ad2f19c9b71
SHA256

8589f3241162d90ad2be553b5fe6888bbcd68680c4f491aac4aee40fe7fd384d
SHA512

b7cbc407caf3a3ec10e73561c06daf1dd4af851d6e1c77d6fa7d6fab91c50bf3a3f1f7c10670d161c70ba5c84e9ac07ffd1263b298a9949c45321f22920a1dd9
SSDEEP

1536:onX6P2JU6nCbtEDbPjg5shQ/G1VyZJAVY53rfL8iL/3p5PKtOPc6BVWFyVsG:HOJU6n+irC8VyZGVw7L8iLBYtIHUyVd

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  8589f3241162d90ad2be553b5fe6888bbcd68680c4f491aac4aee40fe7fd384d
- Size
  
  109KB
- MD5
  
  2cc89125f41c7f0b43a2270bab95f59b
- SHA1
  
  52872c01673f3de64f2abcb038bd2ad2f19c9b71
- SHA256
  
  8589f3241162d90ad2be553b5fe6888bbcd68680c4f491aac4aee40fe7fd384d
- SHA512
  
  b7cbc407caf3a3ec10e73561c06daf1dd4af851d6e1c77d6fa7d6fab91c50bf3a3f1f7c10670d161c70ba5c84e9ac07ffd1263b298a9949c45321f22920a1dd9
- SSDEEP
  
  1536:onX6P2JU6nCbtEDbPjg5shQ/G1VyZJAVY53rfL8iL/3p5PKtOPc6BVWFyVsG:HOJU6n+irC8VyZGVw7L8iLBYtIHUyVd
Score

8^/10

persistence
- Sets DLL path for service in the registry
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Process Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2