8bd9821c438c7942451d2fb7b982488451c4f24f3d59f5d8732908f41bdc7939 | Triage

Sharing

General

Target

8bd9821c438c7942451d2fb7b982488451c4f24f3d59f5d8732908f41bdc7939
Size

74KB
Sample

221129-ggmyaabb26
MD5

83e8fd3279c19935640f8ea8f15e08e0
SHA1

9fea9ddfd945c49a44629a0f245d52cd4d466263
SHA256

8bd9821c438c7942451d2fb7b982488451c4f24f3d59f5d8732908f41bdc7939
SHA512

6ac9c1076ffe14416a55b06571929863de45b3d00476599259913ac10d4368701821d218bf4038bb3178b0ddc0071a206b7aedd028c2a9e03760701cb8717b1b
SSDEEP

1536:0n5E63HroF5n53Kc7S/OcsSjoo8gsRPm+zl1B34TXo:0EplSDtjooAm+bBoU

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  8bd9821c438c7942451d2fb7b982488451c4f24f3d59f5d8732908f41bdc7939
- Size
  
  74KB
- MD5
  
  83e8fd3279c19935640f8ea8f15e08e0
- SHA1
  
  9fea9ddfd945c49a44629a0f245d52cd4d466263
- SHA256
  
  8bd9821c438c7942451d2fb7b982488451c4f24f3d59f5d8732908f41bdc7939
- SHA512
  
  6ac9c1076ffe14416a55b06571929863de45b3d00476599259913ac10d4368701821d218bf4038bb3178b0ddc0071a206b7aedd028c2a9e03760701cb8717b1b
- SSDEEP
  
  1536:0n5E63HroF5n53Kc7S/OcsSjoo8gsRPm+zl1B34TXo:0EplSDtjooAm+bBoU
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2