f9a5c117f45c2cc1fc23ccc88f7fc6586bb7dba85f8a1ca3d4e5f87046d39ed6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38eccf686c562c57251e1366f87430e6
Size

24KB
Sample

220908-ylqy6sffh6
MD5

38eccf686c562c57251e1366f87430e6
SHA1

42cacb642573e24c7625584c275d456b118bed2a
SHA256

f9a5c117f45c2cc1fc23ccc88f7fc6586bb7dba85f8a1ca3d4e5f87046d39ed6
SHA512

812bbcca7ea29eb66891a1a83c23ec72b60e929f6c08a103ffc814c69aad43a16dfaefebb33c8ebbb7a88941f9ad90d3f9131ece51bdaeb3b4cf5a1f6cba5cd1
SSDEEP

192:zkBKt7bnGFPpHuBp3RGKTxW8YMcvdQgkyAd+6zrPf51JHyqOl1aWNaNVa2hQJ:zk6dvGD8hcv7kyAPzJSjlY7VlY

Score

8^/10

Malware Config

Targets

- Target
  
  38eccf686c562c57251e1366f87430e6
- Size
  
  24KB
- MD5
  
  38eccf686c562c57251e1366f87430e6
- SHA1
  
  42cacb642573e24c7625584c275d456b118bed2a
- SHA256
  
  f9a5c117f45c2cc1fc23ccc88f7fc6586bb7dba85f8a1ca3d4e5f87046d39ed6
- SHA512
  
  812bbcca7ea29eb66891a1a83c23ec72b60e929f6c08a103ffc814c69aad43a16dfaefebb33c8ebbb7a88941f9ad90d3f9131ece51bdaeb3b4cf5a1f6cba5cd1
- SSDEEP
  
  192:zkBKt7bnGFPpHuBp3RGKTxW8YMcvdQgkyAd+6zrPf51JHyqOl1aWNaNVa2hQJ:zk6dvGD8hcv7kyAPzJSjlY7VlY
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2