c8827b3385b4cfc8e31913a78e7e108ffeaa2cad099ccc49d4cb2c26edc5a910 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Indirect Standard PO_6400456813.exe
Size

658KB
Sample

231005-n8wg3acg34
MD5

723e0598f2c1517b13506ea1521471fc
SHA1

499f19e81568b3a9ad11a69b1506cadefd06d9c0
SHA256

c8827b3385b4cfc8e31913a78e7e108ffeaa2cad099ccc49d4cb2c26edc5a910
SHA512

cdd043496f5d5732a4a0444ca7a003317131bc41994d5caf649888a55f1ca30dd59916482e852d0721876b6ca7489bfc18f26267b6d9ab507cd016727d5f44a7
SSDEEP

12288:4iMy/jZjSu/bAsWMEaH91sw4OHcfIhwEvoag4QbWS018uxmV/5aLEw:xLZjRDiRAYw4pAhwEvoxTRtQLE

Score

7^/10

Malware Config

Targets

- Target
  
  Indirect Standard PO_6400456813.exe
- Size
  
  658KB
- MD5
  
  723e0598f2c1517b13506ea1521471fc
- SHA1
  
  499f19e81568b3a9ad11a69b1506cadefd06d9c0
- SHA256
  
  c8827b3385b4cfc8e31913a78e7e108ffeaa2cad099ccc49d4cb2c26edc5a910
- SHA512
  
  cdd043496f5d5732a4a0444ca7a003317131bc41994d5caf649888a55f1ca30dd59916482e852d0721876b6ca7489bfc18f26267b6d9ab507cd016727d5f44a7
- SSDEEP
  
  12288:4iMy/jZjSu/bAsWMEaH91sw4OHcfIhwEvoag4QbWS018uxmV/5aLEw:xLZjRDiRAYw4pAhwEvoxTRtQLE
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2