a8b8014bcbc58710fecd9a9c4c4b20cd68db4a3fd36ef171723fc84be8899dc6 | Triage

Sharing

General

Target

a8b8014bcbc58710fecd9a9c4c4b20cd68db4a3fd36ef171723fc84be8899dc6
Size

108KB
Sample

221205-lp2hvsgb26
MD5

74b4bb3c6d40bb60f1827410e175bc84
SHA1

a48ecf758da486ec66374aef2620fd182c6583a4
SHA256

a8b8014bcbc58710fecd9a9c4c4b20cd68db4a3fd36ef171723fc84be8899dc6
SHA512

6fb3bcf5a0145908d330a111311a49c528d1a1d2c95ec9c4e1aed9271fbf1421f53ca0468452ec72f1ee157744eca9bed47f522c3b50bf4acb94d0a3f9f6dd46
SSDEEP

1536:ZXbgU0nlmm8oh+ct4aXASg5VmXzGkV/0uNuucotd04Z9KQh1INjcyLHpRtMjf8bN:aU0nf1h+c+SMmakOuBcqnuU1IB9LJrN

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  a8b8014bcbc58710fecd9a9c4c4b20cd68db4a3fd36ef171723fc84be8899dc6
- Size
  
  108KB
- MD5
  
  74b4bb3c6d40bb60f1827410e175bc84
- SHA1
  
  a48ecf758da486ec66374aef2620fd182c6583a4
- SHA256
  
  a8b8014bcbc58710fecd9a9c4c4b20cd68db4a3fd36ef171723fc84be8899dc6
- SHA512
  
  6fb3bcf5a0145908d330a111311a49c528d1a1d2c95ec9c4e1aed9271fbf1421f53ca0468452ec72f1ee157744eca9bed47f522c3b50bf4acb94d0a3f9f6dd46
- SSDEEP
  
  1536:ZXbgU0nlmm8oh+ct4aXASg5VmXzGkV/0uNuucotd04Z9KQh1INjcyLHpRtMjf8bN:aU0nf1h+c+SMmakOuBcqnuU1IB9LJrN
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2