Description
Looks up country code configured in the registry, likely geofence.
3ec2471a7a0a060ca5c60549ec70370c708f692baa76d13049e9022252e387e0
General
Target
Size
Sample
3ec2471a7a0a060ca5c60549ec70370c708f692baa76d13049e9022252e387e0
910KB
220521-xytp6agaam
Score
8 /10
MD5
SHA1
SHA256
SHA512
4242ae7b111169ba16b56f3cabfb2bfd
ff65a7b8b5ccb534587dbc960b7ada6caa793b60
3ec2471a7a0a060ca5c60549ec70370c708f692baa76d13049e9022252e387e0
ee4b881edfa71cf1b38b359cabd7d045896b71178997882713ddd508e8b43a4594e2a1119a7e8b329069fa8acd1dcebf20d90f3014960d27cbf3f54698e6b038
Malware Config
Targets
Target
MD5
Filesize
3ec2471a7a0a060ca5c60549ec70370c708f692baa76d13049e9022252e387e0
4242ae7b111169ba16b56f3cabfb2bfd
910KB
Score
8/10
SHA1
SHA256
SHA512
ff65a7b8b5ccb534587dbc960b7ada6caa793b60
3ec2471a7a0a060ca5c60549ec70370c708f692baa76d13049e9022252e387e0
ee4b881edfa71cf1b38b359cabd7d045896b71178997882713ddd508e8b43a4594e2a1119a7e8b329069fa8acd1dcebf20d90f3014960d27cbf3f54698e6b038
Tags
Signatures
-
Executes dropped EXE
-
Checks computer location settings
-
Loads dropped DLL
-
Adds Run key to start application
Tags
TTPs
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks