fcbf42133a6e8a5743b8d70891abbaca6b2ff299ecdeada0262422e089b11df1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcbf42133a6e8a5743b8d70891abbaca6b2ff299ecdeada0262422e089b11df1
Size

313KB
Sample

240628-fkdcksvdrr
MD5

6ee88251845d006df5ca02d8c79bfbf4
SHA1

a47a734c27b0a1247190387ee1556450d9038364
SHA256

fcbf42133a6e8a5743b8d70891abbaca6b2ff299ecdeada0262422e089b11df1
SHA512

e2fe5eb5cec4b7a7924f17d1799a9b75ae8ce8b9bad4ea8dccf262a4ee47393c35005a4b542a52988251cd40a251c31dff1a16c61475d30232dfca207731edde
SSDEEP

6144:ztvBPnU1b7e9SQii1EkoNlhlrQ2ZrM2xTYAp1ZEGItUoDs22:Zv1nWdQP1EDhZPxTYAp/EGWUoDN2

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  fcbf42133a6e8a5743b8d70891abbaca6b2ff299ecdeada0262422e089b11df1
- Size
  
  313KB
- MD5
  
  6ee88251845d006df5ca02d8c79bfbf4
- SHA1
  
  a47a734c27b0a1247190387ee1556450d9038364
- SHA256
  
  fcbf42133a6e8a5743b8d70891abbaca6b2ff299ecdeada0262422e089b11df1
- SHA512
  
  e2fe5eb5cec4b7a7924f17d1799a9b75ae8ce8b9bad4ea8dccf262a4ee47393c35005a4b542a52988251cd40a251c31dff1a16c61475d30232dfca207731edde
- SSDEEP
  
  6144:ztvBPnU1b7e9SQii1EkoNlhlrQ2ZrM2xTYAp1ZEGItUoDs22:Zv1nWdQP1EDhZPxTYAp/EGWUoDN2
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2