6b336a61aae0ec345fb6feccf09066d945119e5e5476f8732530ce9014864f55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b336a61aae0ec345fb6feccf09066d945119e5e5476f8732530ce9014864f55
Size

956KB
Sample

220919-et2absbgaq
MD5

d7c975ebbfbf46c0b23b053a00eb146f
SHA1

903d28ff3d10e03e42f8451e696cbaaf87a5a971
SHA256

6b336a61aae0ec345fb6feccf09066d945119e5e5476f8732530ce9014864f55
SHA512

ad97de798476acb30a7c348728f8ae25f7c72391d5931fcd2a60db9c52ba918bb72506134c37681a91da4aa92b8102b8523fafc24dd1caa995123d6a64440abd
SSDEEP

12288:BluF2OPlgCxbUuqEolqhlBG0EZRYx35Ua8wvJfiU3us5NhOblYNTwUkVQ+PYJ+Qt:BluFhCwUuqDluBMfEhJX3z5mKhwbLe+u

Score

7^/10

Malware Config

Targets

- Target
  
  6b336a61aae0ec345fb6feccf09066d945119e5e5476f8732530ce9014864f55
- Size
  
  956KB
- MD5
  
  d7c975ebbfbf46c0b23b053a00eb146f
- SHA1
  
  903d28ff3d10e03e42f8451e696cbaaf87a5a971
- SHA256
  
  6b336a61aae0ec345fb6feccf09066d945119e5e5476f8732530ce9014864f55
- SHA512
  
  ad97de798476acb30a7c348728f8ae25f7c72391d5931fcd2a60db9c52ba918bb72506134c37681a91da4aa92b8102b8523fafc24dd1caa995123d6a64440abd
- SSDEEP
  
  12288:BluF2OPlgCxbUuqEolqhlBG0EZRYx35Ua8wvJfiU3us5NhOblYNTwUkVQ+PYJ+Qt:BluFhCwUuqDluBMfEhJX3z5mKhwbLe+u
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2