badc9f2baaf33d79a5280e74d9383db5f91cb4aab5394a2d0aff417fffb62d2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

badc9f2baaf33d79a5280e74d9383db5f91cb4aab5394a2d0aff417fffb62d2b
Size

1.7MB
Sample

221203-c8tspabg5x
MD5

970886e9c5b2c1df914d2f28527ecb3a
SHA1

cb2f1c288abc59a6aefbeec244bf1d6dead8cf2d
SHA256

badc9f2baaf33d79a5280e74d9383db5f91cb4aab5394a2d0aff417fffb62d2b
SHA512

d4026d7ba6451d7568934cf89c46e7f149373356f95419a4b37512431538b65d712c30bbbbda4231d33b3dbade180f6294f7d5fd758d339471da09090f61fbc9
SSDEEP

49152:suz3GDUmXq++1NtrRZUn4KwDSJPM0PFTDzVYwpD:suz3G5Xq+WtrnU4Kz5DzywpD

Score

7^/10

Malware Config

Targets

- Target
  
  badc9f2baaf33d79a5280e74d9383db5f91cb4aab5394a2d0aff417fffb62d2b
- Size
  
  1.7MB
- MD5
  
  970886e9c5b2c1df914d2f28527ecb3a
- SHA1
  
  cb2f1c288abc59a6aefbeec244bf1d6dead8cf2d
- SHA256
  
  badc9f2baaf33d79a5280e74d9383db5f91cb4aab5394a2d0aff417fffb62d2b
- SHA512
  
  d4026d7ba6451d7568934cf89c46e7f149373356f95419a4b37512431538b65d712c30bbbbda4231d33b3dbade180f6294f7d5fd758d339471da09090f61fbc9
- SSDEEP
  
  49152:suz3GDUmXq++1NtrRZUn4KwDSJPM0PFTDzVYwpD:suz3G5Xq+WtrnU4Kz5DzywpD
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1