bddb2063adaf2cf358d8b51f8e38507b00e823c6a32b89b2e3b33ef0a34c1851 | Triage

Sharing

General

Target

bddb2063adaf2cf358d8b51f8e38507b00e823c6a32b89b2e3b33ef0a34c1851
Size

53KB
Sample

240523-czebmsah32
MD5

fd1becd077f646f5714a4bb30f93323a
SHA1

6b3ee367f7b6af9ecdbf8c8609ba0c3e2d37d9ad
SHA256

bddb2063adaf2cf358d8b51f8e38507b00e823c6a32b89b2e3b33ef0a34c1851
SHA512

c7c6568127b02d7ece40fd48c976ea4c98706754f747155ebc1afd8dbd4dea39e79532e2b7a7e1e248e0b673e58251f0a5fa7939a9de74cab7383ec7297ce23a
SSDEEP

384:v/pohq3KaYJLVG8ZG4T3dOwY7xMR5WYKZseH54lbcnaKnmUhChKwGbxpLPs:2+A4884TtOwkQFKV/na9yrbs

Score

7^/10

Malware Config

Targets

- Target
  
  bddb2063adaf2cf358d8b51f8e38507b00e823c6a32b89b2e3b33ef0a34c1851
- Size
  
  53KB
- MD5
  
  fd1becd077f646f5714a4bb30f93323a
- SHA1
  
  6b3ee367f7b6af9ecdbf8c8609ba0c3e2d37d9ad
- SHA256
  
  bddb2063adaf2cf358d8b51f8e38507b00e823c6a32b89b2e3b33ef0a34c1851
- SHA512
  
  c7c6568127b02d7ece40fd48c976ea4c98706754f747155ebc1afd8dbd4dea39e79532e2b7a7e1e248e0b673e58251f0a5fa7939a9de74cab7383ec7297ce23a
- SSDEEP
  
  384:v/pohq3KaYJLVG8ZG4T3dOwY7xMR5WYKZseH54lbcnaKnmUhChKwGbxpLPs:2+A4884TtOwkQFKV/na9yrbs
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2