b0913253fc4ed9a0636cda22fc7260cae0f73259ab7affb99a64e382787f25ac | Triage

Sharing

General

Target

b0913253fc4ed9a0636cda22fc7260cae0f73259ab7affb99a64e382787f25ac
Size

13KB
Sample

221202-cc1lcsfg3s
MD5

8561016959360452c6c384fcb09b8cc2
SHA1

41b981f5c7cfefcedca4b48474a7492cfecb8d49
SHA256

b0913253fc4ed9a0636cda22fc7260cae0f73259ab7affb99a64e382787f25ac
SHA512

b13db0d2b4035e3e8cfddeb630e96391636a46775a5898de91c6c33360a6c3f37904023a24df7906ebf0016ea4a0b1fd69f8d01d7c480d9e187732b7c1584944
SSDEEP

192:gyUrwy5wrFbyNckCSWJTVWP38WpbLog00/pzpd:gPwRbOCS4WP38W+Rcpzp

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  b0913253fc4ed9a0636cda22fc7260cae0f73259ab7affb99a64e382787f25ac
- Size
  
  13KB
- MD5
  
  8561016959360452c6c384fcb09b8cc2
- SHA1
  
  41b981f5c7cfefcedca4b48474a7492cfecb8d49
- SHA256
  
  b0913253fc4ed9a0636cda22fc7260cae0f73259ab7affb99a64e382787f25ac
- SHA512
  
  b13db0d2b4035e3e8cfddeb630e96391636a46775a5898de91c6c33360a6c3f37904023a24df7906ebf0016ea4a0b1fd69f8d01d7c480d9e187732b7c1584944
- SSDEEP
  
  192:gyUrwy5wrFbyNckCSWJTVWP38WpbLog00/pzpd:gPwRbOCS4WP38W+Rcpzp
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2