18655503f0c9d381006e25bdc856d6a0364be810ff16cebc26b53eddd7641ee8 | Triage

Sharing

General

Target

18655503f0c9d381006e25bdc856d6a0364be810ff16cebc26b53eddd7641ee8
Size

177KB
Sample

221202-a4h5aabe8s
MD5

038ad47c0e89f42b66ed2a72a70b1812
SHA1

ee504abfd0369f274e8347b2b592b9c546cf825c
SHA256

18655503f0c9d381006e25bdc856d6a0364be810ff16cebc26b53eddd7641ee8
SHA512

21f25d832ea5022887c7e50c01724a2567f55fd3482221b8f0525eafe6cbf30a9eca4b2f2dae687e34cabc4cc9de921fecbb42afb54a1ab03456667d634d3e95
SSDEEP

3072:7hxkoCDLHmrAntgPGjuod42yS51XFnndUKiXNb:NwDjmrqlNH/Xlndhy

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  18655503f0c9d381006e25bdc856d6a0364be810ff16cebc26b53eddd7641ee8
- Size
  
  177KB
- MD5
  
  038ad47c0e89f42b66ed2a72a70b1812
- SHA1
  
  ee504abfd0369f274e8347b2b592b9c546cf825c
- SHA256
  
  18655503f0c9d381006e25bdc856d6a0364be810ff16cebc26b53eddd7641ee8
- SHA512
  
  21f25d832ea5022887c7e50c01724a2567f55fd3482221b8f0525eafe6cbf30a9eca4b2f2dae687e34cabc4cc9de921fecbb42afb54a1ab03456667d634d3e95
- SSDEEP
  
  3072:7hxkoCDLHmrAntgPGjuod42yS51XFnndUKiXNb:NwDjmrqlNH/Xlndhy
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2