9147c71b14abf198e6cd6373052ff39c485807f4000a8bc6746e0c63edccb6c4 | Triage

Sharing

General

Target

9147c71b14abf198e6cd6373052ff39c485807f4000a8bc6746e0c63edccb6c4
Size

30KB
Sample

221205-pp3mpsac83
MD5

56ad97e72c919236bc0807c436ae2d03
SHA1

e2488602655ad6392bb05eb8f7230049b5cba228
SHA256

9147c71b14abf198e6cd6373052ff39c485807f4000a8bc6746e0c63edccb6c4
SHA512

e23974846de13bce408922142e8da6b0fc35dd9f6cade13e1b86747b72a10b2ba5db23a59c52af4219c6d14de3fae7f5223b2142733ab29609dfe840f8c2b3fe
SSDEEP

768:HC0CbwX6CldQ6xMp19YeOKfdGDImYFp5vQiF3L:rqCldQK6vQiF3L

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  9147c71b14abf198e6cd6373052ff39c485807f4000a8bc6746e0c63edccb6c4
- Size
  
  30KB
- MD5
  
  56ad97e72c919236bc0807c436ae2d03
- SHA1
  
  e2488602655ad6392bb05eb8f7230049b5cba228
- SHA256
  
  9147c71b14abf198e6cd6373052ff39c485807f4000a8bc6746e0c63edccb6c4
- SHA512
  
  e23974846de13bce408922142e8da6b0fc35dd9f6cade13e1b86747b72a10b2ba5db23a59c52af4219c6d14de3fae7f5223b2142733ab29609dfe840f8c2b3fe
- SSDEEP
  
  768:HC0CbwX6CldQ6xMp19YeOKfdGDImYFp5vQiF3L:rqCldQK6vQiF3L
Score

8^/10

persistence
- Drops file in Drivers directory
- Sets DLL path for service in the registry
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2