fbf01e0f94e292758d58d2cbffe81100895b427c616173223053b46cbc97c44d | Triage

Sharing

General

Target

fbf01e0f94e292758d58d2cbffe81100895b427c616173223053b46cbc97c44d
Size

131KB
Sample

221203-18jvgsed2x
MD5

2ca13eff9238997803538b3f8c12879d
SHA1

a608481b7d245842c6d4547dc99b9c26441d2124
SHA256

fbf01e0f94e292758d58d2cbffe81100895b427c616173223053b46cbc97c44d
SHA512

add7135beeabde6c93f5e498af15154a3534b91308ddec782318c6bc7a768625743f29f2fe5a960b05b3ec07ff9e877c06d639ea32e1701367ae91c71e1a09c3
SSDEEP

3072:efP+g0kmb5YR83nkB43RSG83wH8ON+UgoeQN9WZPeYY7ahh:e+0w5Ln8AcOIyUdeh7az

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  fbf01e0f94e292758d58d2cbffe81100895b427c616173223053b46cbc97c44d
- Size
  
  131KB
- MD5
  
  2ca13eff9238997803538b3f8c12879d
- SHA1
  
  a608481b7d245842c6d4547dc99b9c26441d2124
- SHA256
  
  fbf01e0f94e292758d58d2cbffe81100895b427c616173223053b46cbc97c44d
- SHA512
  
  add7135beeabde6c93f5e498af15154a3534b91308ddec782318c6bc7a768625743f29f2fe5a960b05b3ec07ff9e877c06d639ea32e1701367ae91c71e1a09c3
- SSDEEP
  
  3072:efP+g0kmb5YR83nkB43RSG83wH8ON+UgoeQN9WZPeYY7ahh:e+0w5Ln8AcOIyUdeh7az
Score

8^/10

persistence
- Executes dropped EXE
- Sets file execution options in registry
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2