8e9d0cc4cae276af6460bb68cafb1c134a429d65fbe0304ff6c6b22d9e39a871 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e9d0cc4cae276af6460bb68cafb1c134a429d65fbe0304ff6c6b22d9e39a871
Size

287KB
Sample

220919-t3tzyagge9
MD5

84a1099bd5f7d37e736fd05673749b72
SHA1

c072fc55dd587625d41b155d49976c700f115475
SHA256

8e9d0cc4cae276af6460bb68cafb1c134a429d65fbe0304ff6c6b22d9e39a871
SHA512

cd990af8b62bae05f7d066a6ab45980006448f3bc9cf85f45955db017cba9bcda2ce876bc88a059bf4fe967b44cfdd1207fa58893e5ab0f1527c410a4405cc81
SSDEEP

6144:Od93ZBZMbqYgomHmcRUTV5nUC7ti1i2sPR9InxhW4EVpPzOJcN:Or3ZBIRARUTV5nK13iRmxhWhVNzp

Score

8^/10

Malware Config

Targets

- Target
  
  8e9d0cc4cae276af6460bb68cafb1c134a429d65fbe0304ff6c6b22d9e39a871
- Size
  
  287KB
- MD5
  
  84a1099bd5f7d37e736fd05673749b72
- SHA1
  
  c072fc55dd587625d41b155d49976c700f115475
- SHA256
  
  8e9d0cc4cae276af6460bb68cafb1c134a429d65fbe0304ff6c6b22d9e39a871
- SHA512
  
  cd990af8b62bae05f7d066a6ab45980006448f3bc9cf85f45955db017cba9bcda2ce876bc88a059bf4fe967b44cfdd1207fa58893e5ab0f1527c410a4405cc81
- SSDEEP
  
  6144:Od93ZBZMbqYgomHmcRUTV5nUC7ti1i2sPR9InxhW4EVpPzOJcN:Or3ZBIRARUTV5nK13iRmxhWhVNzp
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2