044dc779fb42cd35f4dd58584f091920f230c1848f16fbc9e4d83f5a441a254e | Triage

Sharing

General

Target

044dc779fb42cd35f4dd58584f091920f230c1848f16fbc9e4d83f5a441a254e
Size

26KB
Sample

240523-wvddbsbe2t
MD5

8cb2283255f90d7fb2d3a794056e6762
SHA1

926abf228a112153bcfefa9829f07d71716bb186
SHA256

044dc779fb42cd35f4dd58584f091920f230c1848f16fbc9e4d83f5a441a254e
SHA512

211f1b4bca4b37bd90249d6bad86113f0f17c65c946443458b8c230f2b8f9060416e903ae6327a71b3f26452b7a14cd155a4583439aee838e1b74f1ba628da0d
SSDEEP

768:qq3G3q83wdv7GLGS1R9TNoINEx9jnhwrX:Jkq83wdv7Gt9

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  044dc779fb42cd35f4dd58584f091920f230c1848f16fbc9e4d83f5a441a254e
- Size
  
  26KB
- MD5
  
  8cb2283255f90d7fb2d3a794056e6762
- SHA1
  
  926abf228a112153bcfefa9829f07d71716bb186
- SHA256
  
  044dc779fb42cd35f4dd58584f091920f230c1848f16fbc9e4d83f5a441a254e
- SHA512
  
  211f1b4bca4b37bd90249d6bad86113f0f17c65c946443458b8c230f2b8f9060416e903ae6327a71b3f26452b7a14cd155a4583439aee838e1b74f1ba628da0d
- SSDEEP
  
  768:qq3G3q83wdv7GLGS1R9TNoINEx9jnhwrX:Jkq83wdv7Gt9
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2