c82cc113f3d25644e87c5b20b4eb182eef8a56da1e610ee321bdae12af3160fa | Triage

Sharing

General

Target

c82cc113f3d25644e87c5b20b4eb182eef8a56da1e610ee321bdae12af3160fa
Size

205KB
Sample

230607-n6cl6shh98
MD5

0cecd910343477054889c8d370844842
SHA1

df3a76aa477a4f41bd7b09914866df217564cd48
SHA256

c82cc113f3d25644e87c5b20b4eb182eef8a56da1e610ee321bdae12af3160fa
SHA512

5c94d5acaec57c1b6f15e41d0afb02d307d6394470138e34469dd4e26a0c749650420fb5500afce2f60b74d8a94da487c644153a3207ed95db8ef2ca07017359
SSDEEP

3072:meTRJ0kHbnpN23kQKp5XzutZXKGrpeN84LuZAIybiy3xEfbi:FTR2AnpN2wDurXBeBuZAIMEj

Score

7^/10

Malware Config

Targets

- Target
  
  c82cc113f3d25644e87c5b20b4eb182eef8a56da1e610ee321bdae12af3160fa
- Size
  
  205KB
- MD5
  
  0cecd910343477054889c8d370844842
- SHA1
  
  df3a76aa477a4f41bd7b09914866df217564cd48
- SHA256
  
  c82cc113f3d25644e87c5b20b4eb182eef8a56da1e610ee321bdae12af3160fa
- SHA512
  
  5c94d5acaec57c1b6f15e41d0afb02d307d6394470138e34469dd4e26a0c749650420fb5500afce2f60b74d8a94da487c644153a3207ed95db8ef2ca07017359
- SSDEEP
  
  3072:meTRJ0kHbnpN23kQKp5XzutZXKGrpeN84LuZAIybiy3xEfbi:FTR2AnpN2wDurXBeBuZAIMEj
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1