cab484ddb2388b4a9fb1af5eaaaff1a178bd0ece25d1ff9892b88f2b567ddacb | Triage

Sharing

General

Target

0ac0333c158c6d19018fcba5c53ebede
Size

16KB
Sample

231230-cawvdshcd6
MD5

0ac0333c158c6d19018fcba5c53ebede
SHA1

5c978a69ee262d6b3832771d266b87d70ec6df8c
SHA256

cab484ddb2388b4a9fb1af5eaaaff1a178bd0ece25d1ff9892b88f2b567ddacb
SHA512

39c60d555d17556f77aad0d6c63d107f19b466e11307dad85d6946ffe797eae5fc0df24f6aac36f605b280d385dacfded71446ae21afc74d976505f3bf2ee482
SSDEEP

384:kQ5Ira73w/p8uTbia4GjibK5igtBR0xXbKae4oN8aJZLB:Dyubw/p8qia4Gj5Vtv0xXbAtr

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  0ac0333c158c6d19018fcba5c53ebede
- Size
  
  16KB
- MD5
  
  0ac0333c158c6d19018fcba5c53ebede
- SHA1
  
  5c978a69ee262d6b3832771d266b87d70ec6df8c
- SHA256
  
  cab484ddb2388b4a9fb1af5eaaaff1a178bd0ece25d1ff9892b88f2b567ddacb
- SHA512
  
  39c60d555d17556f77aad0d6c63d107f19b466e11307dad85d6946ffe797eae5fc0df24f6aac36f605b280d385dacfded71446ae21afc74d976505f3bf2ee482
- SSDEEP
  
  384:kQ5Ira73w/p8uTbia4GjibK5igtBR0xXbKae4oN8aJZLB:Dyubw/p8qia4Gj5Vtv0xXbAtr
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2