8212b521d5f17a1dec98c2bbbc4269c1c8993259d174095956a1e49e4ac071be | Triage

Sharing

General

Target

8212b521d5f17a1dec98c2bbbc4269c1c8993259d174095956a1e49e4ac071be
Size

18KB
Sample

240704-agd7tavgjc
MD5

9b28f0a393a2b5879a54e0f83987deb0
SHA1

8a3b0583fd92fbbb85e85ebc4018ad693e9df26f
SHA256

8212b521d5f17a1dec98c2bbbc4269c1c8993259d174095956a1e49e4ac071be
SHA512

9bf94e44e33f6714146aced24b8505ca801499b9ba62f00a46a309d32f22330f45fa522e7d1840bf8b8f984937e86cfd6e9faf09323f8cc85061ec4a003c9d10
SSDEEP

384:r6eHIAx0pqNgHvRtoyhAkeKE7pDKbR6hcdBYpBmLE:r6eHIMgPRtzykeKE7pkRpTE

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  8212b521d5f17a1dec98c2bbbc4269c1c8993259d174095956a1e49e4ac071be
- Size
  
  18KB
- MD5
  
  9b28f0a393a2b5879a54e0f83987deb0
- SHA1
  
  8a3b0583fd92fbbb85e85ebc4018ad693e9df26f
- SHA256
  
  8212b521d5f17a1dec98c2bbbc4269c1c8993259d174095956a1e49e4ac071be
- SHA512
  
  9bf94e44e33f6714146aced24b8505ca801499b9ba62f00a46a309d32f22330f45fa522e7d1840bf8b8f984937e86cfd6e9faf09323f8cc85061ec4a003c9d10
- SSDEEP
  
  384:r6eHIAx0pqNgHvRtoyhAkeKE7pDKbR6hcdBYpBmLE:r6eHIMgPRtzykeKE7pkRpTE
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2