c2fbf962250656d69cb75d3f703d88b68aaeb0f99c4ab93dff4918cd643da717 | Triage

Sharing

General

Target

c2fbf962250656d69cb75d3f703d88b68aaeb0f99c4ab93dff4918cd643da717
Size

41KB
Sample

220919-dvs5nseag3
MD5

77956f3227014036992cdb81c1b40356
SHA1

2d148e5b8c738bd71450e7348b115f6f0c86688a
SHA256

c2fbf962250656d69cb75d3f703d88b68aaeb0f99c4ab93dff4918cd643da717
SHA512

3bad0cc51cd4f0dd6d2470845c72739c3a73d86d2d9ee386b85cd208caf00f8db9518b7c0212d7fac325075539caf397174d44a2670bee789557568afc937193
SSDEEP

768:QIBar1ZIZYnfI9opm6AIHIjaI7g9mVmUnRoNE/W5dRV8:pW1ZIZqI9opm6AIHIjzmU6Nzd

Score

8^/10

Malware Config

Targets

- Target
  
  c2fbf962250656d69cb75d3f703d88b68aaeb0f99c4ab93dff4918cd643da717
- Size
  
  41KB
- MD5
  
  77956f3227014036992cdb81c1b40356
- SHA1
  
  2d148e5b8c738bd71450e7348b115f6f0c86688a
- SHA256
  
  c2fbf962250656d69cb75d3f703d88b68aaeb0f99c4ab93dff4918cd643da717
- SHA512
  
  3bad0cc51cd4f0dd6d2470845c72739c3a73d86d2d9ee386b85cd208caf00f8db9518b7c0212d7fac325075539caf397174d44a2670bee789557568afc937193
- SSDEEP
  
  768:QIBar1ZIZYnfI9opm6AIHIjaI7g9mVmUnRoNE/W5dRV8:pW1ZIZqI9opm6AIHIjzmU6Nzd
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2