55e6277caf00d4f97a27705ba4ae760578c4a0cbace8929f7067c52c93edb487 | Triage

Sharing

General

Target

201ccc41ff100bf8046574b0ed41e939
Size

30KB
Sample

231225-p5ycxsfagk
MD5

201ccc41ff100bf8046574b0ed41e939
SHA1

e99a1ddd5947544ffdbcc448606d87d79bee2c97
SHA256

55e6277caf00d4f97a27705ba4ae760578c4a0cbace8929f7067c52c93edb487
SHA512

63cb5086969a2d9d3c353da8fcf282866fb23198ddfe9a4fd2ed11474b2123b41c7f67147b7f3b639065aec12cc9dd1c21a9319dc6ca80e52e8ab5c31506391b
SSDEEP

768:o874OGQjeUiXh/LWFsJpBv0EqLTP6uPixUWeWmuF9hZx3Ov4:otOZcNcEqPrpWeWPF9Mv4

Score

7^/10

Malware Config

Targets

- Target
  
  201ccc41ff100bf8046574b0ed41e939
- Size
  
  30KB
- MD5
  
  201ccc41ff100bf8046574b0ed41e939
- SHA1
  
  e99a1ddd5947544ffdbcc448606d87d79bee2c97
- SHA256
  
  55e6277caf00d4f97a27705ba4ae760578c4a0cbace8929f7067c52c93edb487
- SHA512
  
  63cb5086969a2d9d3c353da8fcf282866fb23198ddfe9a4fd2ed11474b2123b41c7f67147b7f3b639065aec12cc9dd1c21a9319dc6ca80e52e8ab5c31506391b
- SSDEEP
  
  768:o874OGQjeUiXh/LWFsJpBv0EqLTP6uPixUWeWmuF9hZx3Ov4:otOZcNcEqPrpWeWPF9Mv4
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2