0b1ba550b6365d2f2a5dc7cbcaf4624c9d028e13d2ddd5bc69b3481b103d0789 | Triage

Sharing

General

Target

1613468c1ec5d4771a928d8957aa50d2
Size

1.4MB
Sample

231230-mmr23saefp
MD5

1613468c1ec5d4771a928d8957aa50d2
SHA1

e61d9b7f229307c6f578d86817721a5f01952cc9
SHA256

0b1ba550b6365d2f2a5dc7cbcaf4624c9d028e13d2ddd5bc69b3481b103d0789
SHA512

02c4e8ab5f3f4e14857b33dbf3ae78151f726b679199be94c2fef9f2b1349acebbed2dd830ddccb0b037dbf32eea72275b0d574eb691f5451512f6f772efbf29
SSDEEP

24576:I8JWFWNaOvknjVHX1OE5DmvDtM29TY2mFHPc5DMRD1z4SnRbcGI8Ogc:b6WcbnjxTSv5rYVvmg4SnF8D

Score

7^/10

Malware Config

Targets

- Target
  
  1613468c1ec5d4771a928d8957aa50d2
- Size
  
  1.4MB
- MD5
  
  1613468c1ec5d4771a928d8957aa50d2
- SHA1
  
  e61d9b7f229307c6f578d86817721a5f01952cc9
- SHA256
  
  0b1ba550b6365d2f2a5dc7cbcaf4624c9d028e13d2ddd5bc69b3481b103d0789
- SHA512
  
  02c4e8ab5f3f4e14857b33dbf3ae78151f726b679199be94c2fef9f2b1349acebbed2dd830ddccb0b037dbf32eea72275b0d574eb691f5451512f6f772efbf29
- SSDEEP
  
  24576:I8JWFWNaOvknjVHX1OE5DmvDtM29TY2mFHPc5DMRD1z4SnRbcGI8Ogc:b6WcbnjxTSv5rYVvmg4SnF8D
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2