ba52cbe44bb9b4e161adb81ae2c801573c482f249cb26fe3da2fea9da0a86408 | Triage

Sharing

General

Target

ba52cbe44bb9b4e161adb81ae2c801573c482f249cb26fe3da2fea9da0a86408
Size

1.1MB
Sample

240523-bpcvdsgc2t
MD5

ca592ea3cfeeb12ad69676304ce410ef
SHA1

cf15ae912a90d4e22d0529a00bc5a960d520ad2e
SHA256

ba52cbe44bb9b4e161adb81ae2c801573c482f249cb26fe3da2fea9da0a86408
SHA512

0b095552d545efdc9c3b570c0c25ae749f1be37985c61c7ee5423cc7a0e87df62f30fdf3f7d43b75f7f79ef7c6218acc5347df5169e245140409d36e4b5e898f
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QD:CcaClSFlG4ZM7QzMk

Score

7^/10

Malware Config

Targets

- Target
  
  ba52cbe44bb9b4e161adb81ae2c801573c482f249cb26fe3da2fea9da0a86408
- Size
  
  1.1MB
- MD5
  
  ca592ea3cfeeb12ad69676304ce410ef
- SHA1
  
  cf15ae912a90d4e22d0529a00bc5a960d520ad2e
- SHA256
  
  ba52cbe44bb9b4e161adb81ae2c801573c482f249cb26fe3da2fea9da0a86408
- SHA512
  
  0b095552d545efdc9c3b570c0c25ae749f1be37985c61c7ee5423cc7a0e87df62f30fdf3f7d43b75f7f79ef7c6218acc5347df5169e245140409d36e4b5e898f
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QD:CcaClSFlG4ZM7QzMk
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2