121dfd22ce9a17034540eca2202372ec95369fa9817c4de9f0eb65f5dbd9e019 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

054caeb9d70b530cedc07f8db75a9d19
Size

1.1MB
Sample

231229-14lhhsbgaq
MD5

054caeb9d70b530cedc07f8db75a9d19
SHA1

1a33f62e16087651172531a3758c44b0d9e9463b
SHA256

121dfd22ce9a17034540eca2202372ec95369fa9817c4de9f0eb65f5dbd9e019
SHA512

b96bf358d6f0b24332de73f359d183058dda7a254f904b9a5861495eb4cd8527b93f5178a0923e8e98a26a68142f891502443ed0f6a8b99cf8d82b9bbbdf4005
SSDEEP

12288:kMiy4IadS4ms5I6e66fEheKhXsNtnQvMLOOar7nXDyyrwlKRtE9hTEnY54HIXjl+:kbSaE4mvt/Sunbx4beyA914o5/1duhf

Score

7^/10

Malware Config

Targets

- Target
  
  054caeb9d70b530cedc07f8db75a9d19
- Size
  
  1.1MB
- MD5
  
  054caeb9d70b530cedc07f8db75a9d19
- SHA1
  
  1a33f62e16087651172531a3758c44b0d9e9463b
- SHA256
  
  121dfd22ce9a17034540eca2202372ec95369fa9817c4de9f0eb65f5dbd9e019
- SHA512
  
  b96bf358d6f0b24332de73f359d183058dda7a254f904b9a5861495eb4cd8527b93f5178a0923e8e98a26a68142f891502443ed0f6a8b99cf8d82b9bbbdf4005
- SSDEEP
  
  12288:kMiy4IadS4ms5I6e66fEheKhXsNtnQvMLOOar7nXDyyrwlKRtE9hTEnY54HIXjl+:kbSaE4mvt/Sunbx4beyA914o5/1duhf
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2