d2ade013842751895e152fb60cde6524dd7249919689ef6d028f9a00b69cdbe6 | Triage

Sharing

General

Target

19fba48af940ee0df42d649be0b83956
Size

29KB
Sample

231225-nbzhfschc3
MD5

19fba48af940ee0df42d649be0b83956
SHA1

cb5d068906ac8a9aa0441653e117fda8c5638002
SHA256

d2ade013842751895e152fb60cde6524dd7249919689ef6d028f9a00b69cdbe6
SHA512

574acf0fc89f19c17c778b9b36db817b8ffcc0b58b4a3a93037305736e45925c3581af04b4632e5f41f121a7f5a83f6ffdb528500b6016563fed17b131c7aaa3
SSDEEP

768:T4JROoFgDEUEWZdjLYbIvUWAJaTIQLRGqpeoRMb/+4azuY:EVFsEde6svkw7cq8oRMb/PazuY

Score

7^/10

Malware Config

Targets

- Target
  
  19fba48af940ee0df42d649be0b83956
- Size
  
  29KB
- MD5
  
  19fba48af940ee0df42d649be0b83956
- SHA1
  
  cb5d068906ac8a9aa0441653e117fda8c5638002
- SHA256
  
  d2ade013842751895e152fb60cde6524dd7249919689ef6d028f9a00b69cdbe6
- SHA512
  
  574acf0fc89f19c17c778b9b36db817b8ffcc0b58b4a3a93037305736e45925c3581af04b4632e5f41f121a7f5a83f6ffdb528500b6016563fed17b131c7aaa3
- SSDEEP
  
  768:T4JROoFgDEUEWZdjLYbIvUWAJaTIQLRGqpeoRMb/+4azuY:EVFsEde6svkw7cq8oRMb/PazuY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2