ff7fe52815a4f067620b5f063aad20ea81ff68f85c63a100cae2b42c477b1a8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c1fd98508ff08117b3606ef3df1c5f9
Size

418KB
Sample

240203-mqzw4afcb6
MD5

8c1fd98508ff08117b3606ef3df1c5f9
SHA1

998dd4c108e218eb912347af50d73eed62f63ce8
SHA256

ff7fe52815a4f067620b5f063aad20ea81ff68f85c63a100cae2b42c477b1a8a
SHA512

363384ed12920cd003dd1fddb82718fc5fef52eb1d4459a6b248acb518d3f0fa45f0958a104004d54d42720f502957d560580a591aa2bd4db2c31f7bd2143116
SSDEEP

6144:cNMUe2TLW5FLFRoi/+zFefn98X+7bzEsToiK:cNMUz+5ZEi/tSMEsToi

Score

7^/10

Malware Config

Targets

- Target
  
  8c1fd98508ff08117b3606ef3df1c5f9
- Size
  
  418KB
- MD5
  
  8c1fd98508ff08117b3606ef3df1c5f9
- SHA1
  
  998dd4c108e218eb912347af50d73eed62f63ce8
- SHA256
  
  ff7fe52815a4f067620b5f063aad20ea81ff68f85c63a100cae2b42c477b1a8a
- SHA512
  
  363384ed12920cd003dd1fddb82718fc5fef52eb1d4459a6b248acb518d3f0fa45f0958a104004d54d42720f502957d560580a591aa2bd4db2c31f7bd2143116
- SSDEEP
  
  6144:cNMUe2TLW5FLFRoi/+zFefn98X+7bzEsToiK:cNMUz+5ZEi/tSMEsToi
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2