0308de21b5648a9c7fb7f487fee627bad12846196367d44fec17e839209b1d73 | Triage

Sharing

General

Target

0308de21b5648a9c7fb7f487fee627bad12846196367d44fec17e839209b1d73
Size

92KB
Sample

220919-dtgp9aeac4
MD5

514eec0969b7c1db5b75289374dbeb39
SHA1

1cff2d6d109567941e4a92df1a1b7ccd8f3ae608
SHA256

0308de21b5648a9c7fb7f487fee627bad12846196367d44fec17e839209b1d73
SHA512

052f4182e3f45a505e5489b0d806ce4693f3b062f5c92ad8410a646f5d4fe25f2eac58b46423ebcc8ee045d972fb4e3daf8789c1349d0c3fcdbaf654b86c387e
SSDEEP

1536:WiOBKDP+vAXS2N5h9HPUWlmz60lHjZUMpkPVPSPkP4PjPIkbohaWdV7NObzHweyR:OaGb2N5tlmz60l2YbohacATw8NCv7t

Score

8^/10

Malware Config

Targets

- Target
  
  0308de21b5648a9c7fb7f487fee627bad12846196367d44fec17e839209b1d73
- Size
  
  92KB
- MD5
  
  514eec0969b7c1db5b75289374dbeb39
- SHA1
  
  1cff2d6d109567941e4a92df1a1b7ccd8f3ae608
- SHA256
  
  0308de21b5648a9c7fb7f487fee627bad12846196367d44fec17e839209b1d73
- SHA512
  
  052f4182e3f45a505e5489b0d806ce4693f3b062f5c92ad8410a646f5d4fe25f2eac58b46423ebcc8ee045d972fb4e3daf8789c1349d0c3fcdbaf654b86c387e
- SSDEEP
  
  1536:WiOBKDP+vAXS2N5h9HPUWlmz60lHjZUMpkPVPSPkP4PjPIkbohaWdV7NObzHweyR:OaGb2N5tlmz60l2YbohacATw8NCv7t
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2