ac8e78aadd5453431f45a2e48fcc2fdb4054a405668e3771cff5b49f0bbe50aa | Triage

Sharing

General

Target

ac8e78aadd5453431f45a2e48fcc2fdb4054a405668e3771cff5b49f0bbe50aa
Size

311KB
Sample

221203-2134tsdd42
MD5

8e4da2c7b69f29c2b0891fa38311e774
SHA1

ba5dac83307d9122fae309dfbd266a6b11338101
SHA256

ac8e78aadd5453431f45a2e48fcc2fdb4054a405668e3771cff5b49f0bbe50aa
SHA512

dfed381d0c9348d26c747dc328b88a1fae4ab59317af424d79f63abe5f6ee1c64740074cc2477f7e1ae118c7b3f8f2aca93ba5f238f1c9abf47ad62f569f0fb5
SSDEEP

6144:36YajbofxCvU8G4TrbER5lOpwNEBRSWslEbumub4vxCGXE55am:xWZ0/TNSoWLkb4vx1EPJ

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  ac8e78aadd5453431f45a2e48fcc2fdb4054a405668e3771cff5b49f0bbe50aa
- Size
  
  311KB
- MD5
  
  8e4da2c7b69f29c2b0891fa38311e774
- SHA1
  
  ba5dac83307d9122fae309dfbd266a6b11338101
- SHA256
  
  ac8e78aadd5453431f45a2e48fcc2fdb4054a405668e3771cff5b49f0bbe50aa
- SHA512
  
  dfed381d0c9348d26c747dc328b88a1fae4ab59317af424d79f63abe5f6ee1c64740074cc2477f7e1ae118c7b3f8f2aca93ba5f238f1c9abf47ad62f569f0fb5
- SSDEEP
  
  6144:36YajbofxCvU8G4TrbER5lOpwNEBRSWslEbumub4vxCGXE55am:xWZ0/TNSoWLkb4vx1EPJ
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2