3a8ff0abc751168a21c31bccc2455ed51c7f8584a7bcbad02abb020ae6391c5e | Triage

Sharing

General

Target

3a8ff0abc751168a21c31bccc2455ed51c7f8584a7bcbad02abb020ae6391c5e
Size

4.1MB
Sample

220919-lpx6faahh4
MD5

beb8a4806cb710738aa79b942ec4f23c
SHA1

599c071863f6957c1dc539edf59914879ad62f3b
SHA256

3a8ff0abc751168a21c31bccc2455ed51c7f8584a7bcbad02abb020ae6391c5e
SHA512

f97d4f38c4a4cb1192250d8de46f61601afa69fa197d23cfdf70070885326f6251bb8d1f8c6426d2d6d6f128acd8ee41500aaa2efd6b816f24837d462f87e943
SSDEEP

98304:hUIRGSVGLON7BP4HXg8ywYaSsQu1YWunqLLCTuljz6:RtV57AH3Tdd1runmmTuBz6

Score

8^/10

Malware Config

Targets

- Target
  
  3a8ff0abc751168a21c31bccc2455ed51c7f8584a7bcbad02abb020ae6391c5e
- Size
  
  4.1MB
- MD5
  
  beb8a4806cb710738aa79b942ec4f23c
- SHA1
  
  599c071863f6957c1dc539edf59914879ad62f3b
- SHA256
  
  3a8ff0abc751168a21c31bccc2455ed51c7f8584a7bcbad02abb020ae6391c5e
- SHA512
  
  f97d4f38c4a4cb1192250d8de46f61601afa69fa197d23cfdf70070885326f6251bb8d1f8c6426d2d6d6f128acd8ee41500aaa2efd6b816f24837d462f87e943
- SSDEEP
  
  98304:hUIRGSVGLON7BP4HXg8ywYaSsQu1YWunqLLCTuljz6:RtV57AH3Tdd1runmmTuBz6
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2