7323d25208f99cbbe9cca8da4187a119d7ed9be500968b7a7f16b5dc5885d0c3 | Triage

Sharing

General

Target

7323d25208f99cbbe9cca8da4187a119d7ed9be500968b7a7f16b5dc5885d0c3
Size

8.5MB
Sample

220916-nczvlsbceq
MD5

3ca11cf521167682217f50f518042dd4
SHA1

a05b8c003d0055cf518bf9d1a1c2834b71510342
SHA256

7323d25208f99cbbe9cca8da4187a119d7ed9be500968b7a7f16b5dc5885d0c3
SHA512

efb2af073de82f701bf0017e036371dfab9109a8a290e62a3ed1961a7e59f2bd673bbe0bbce2d722bc6448069318bafec2701fc442aea0e439e4e57765c4bd81
SSDEEP

196608:G7PkOJxfcwTDFHX7dvTjEOvfr9mIVbYQLiTItv3mCN3D34:8PkexEsHhvsOvf8aYQdv3mCFo

Score

8^/10

Malware Config

Targets

- Target
  
  7323d25208f99cbbe9cca8da4187a119d7ed9be500968b7a7f16b5dc5885d0c3
- Size
  
  8.5MB
- MD5
  
  3ca11cf521167682217f50f518042dd4
- SHA1
  
  a05b8c003d0055cf518bf9d1a1c2834b71510342
- SHA256
  
  7323d25208f99cbbe9cca8da4187a119d7ed9be500968b7a7f16b5dc5885d0c3
- SHA512
  
  efb2af073de82f701bf0017e036371dfab9109a8a290e62a3ed1961a7e59f2bd673bbe0bbce2d722bc6448069318bafec2701fc442aea0e439e4e57765c4bd81
- SSDEEP
  
  196608:G7PkOJxfcwTDFHX7dvTjEOvfr9mIVbYQLiTItv3mCN3D34:8PkexEsHhvsOvf8aYQdv3mCFo
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2