5baf29a8b076740caa65f0e2caa0bc55ca98e850d478908a310b572c72fe7d0c | Triage

Sharing

General

Target

5baf29a8b076740caa65f0e2caa0bc55ca98e850d478908a310b572c72fe7d0c
Size

33KB
Sample

221205-f8vxjaed8s
MD5

24baab786afc6be75276ea008d1c76c0
SHA1

9863f1f9089482d1af2bb80bac173d2d74e7d468
SHA256

5baf29a8b076740caa65f0e2caa0bc55ca98e850d478908a310b572c72fe7d0c
SHA512

8ddbfd1f88b789cf12ee0fbaacc9de4dcc4fbe63832417efca5866db40de9513d59d32a3710170efebe80f92fc9c5fdc778653e7d4e464ed852ce77554cfbc65
SSDEEP

768:8YoiqqZOcQLyH435p6lXaVSI3D1TgkcaG8S/VmF:8YvqqZ1QLyYTXcI5lZSQF

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  5baf29a8b076740caa65f0e2caa0bc55ca98e850d478908a310b572c72fe7d0c
- Size
  
  33KB
- MD5
  
  24baab786afc6be75276ea008d1c76c0
- SHA1
  
  9863f1f9089482d1af2bb80bac173d2d74e7d468
- SHA256
  
  5baf29a8b076740caa65f0e2caa0bc55ca98e850d478908a310b572c72fe7d0c
- SHA512
  
  8ddbfd1f88b789cf12ee0fbaacc9de4dcc4fbe63832417efca5866db40de9513d59d32a3710170efebe80f92fc9c5fdc778653e7d4e464ed852ce77554cfbc65
- SSDEEP
  
  768:8YoiqqZOcQLyH435p6lXaVSI3D1TgkcaG8S/VmF:8YvqqZ1QLyYTXcI5lZSQF
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2