8bddf9c07910440d00d9df7403940f076c9bbb06314ac0e6b52b82f1cff369b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bddf9c07910440d00d9df7403940f076c9bbb06314ac0e6b52b82f1cff369b7
Size

208KB
Sample

221202-be2e1ace6t
MD5

a0693c153075318cb136de13bb2b27fd
SHA1

c303f049d0c62433999cb43c013a79cf026c63c4
SHA256

8bddf9c07910440d00d9df7403940f076c9bbb06314ac0e6b52b82f1cff369b7
SHA512

d5105ae6da0b6c0ba113bebbcb2809952dafd6af23b2a81f53e081a59434de0a50a640bab4f422861525823617c6923cd7610075b812616e721443f34d163c26
SSDEEP

3072:BVHgCc4xGvbwcU9KQ2BBAHmaPxiVoIb5Ek:0Cc4xGxWKQ2Bonxc

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  8bddf9c07910440d00d9df7403940f076c9bbb06314ac0e6b52b82f1cff369b7
- Size
  
  208KB
- MD5
  
  a0693c153075318cb136de13bb2b27fd
- SHA1
  
  c303f049d0c62433999cb43c013a79cf026c63c4
- SHA256
  
  8bddf9c07910440d00d9df7403940f076c9bbb06314ac0e6b52b82f1cff369b7
- SHA512
  
  d5105ae6da0b6c0ba113bebbcb2809952dafd6af23b2a81f53e081a59434de0a50a640bab4f422861525823617c6923cd7610075b812616e721443f34d163c26
- SSDEEP
  
  3072:BVHgCc4xGvbwcU9KQ2BBAHmaPxiVoIb5Ek:0Cc4xGxWKQ2Bonxc
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2