2ff896e0eb0826b01108b2f34ff542221442047164e91570d7b556e0904496b0 | Triage

Sharing

General

Target

2ff896e0eb0826b01108b2f34ff542221442047164e91570d7b556e0904496b0
Size

7.9MB
Sample

220922-j9qkzsaff8
MD5

0db11d9b70979077ee5c9b64ea246642
SHA1

3da78b279f552aaf5e55fde70a02f4fa420603b7
SHA256

2ff896e0eb0826b01108b2f34ff542221442047164e91570d7b556e0904496b0
SHA512

b0a1d1f489e13af484afc958d97d784d5b2b224a38df1ce8f2a80a21905aa44d9e3ecced1b1970db99faa208648c64b9830524bd9d8dfa0f2d882436ab1aa9a0
SSDEEP

196608:NIaoWrmazl5IaoWrmazlc+WV4TR6sH96BCnh72J1IFFtxjMeB1EWe39MgIaowrmv:NIaoWqqIaoWqMWV4VwBEhyGtxwSgIao7

Score

7^/10

Malware Config

Targets

- Target
  
  2ff896e0eb0826b01108b2f34ff542221442047164e91570d7b556e0904496b0
- Size
  
  7.9MB
- MD5
  
  0db11d9b70979077ee5c9b64ea246642
- SHA1
  
  3da78b279f552aaf5e55fde70a02f4fa420603b7
- SHA256
  
  2ff896e0eb0826b01108b2f34ff542221442047164e91570d7b556e0904496b0
- SHA512
  
  b0a1d1f489e13af484afc958d97d784d5b2b224a38df1ce8f2a80a21905aa44d9e3ecced1b1970db99faa208648c64b9830524bd9d8dfa0f2d882436ab1aa9a0
- SSDEEP
  
  196608:NIaoWrmazl5IaoWrmazlc+WV4TR6sH96BCnh72J1IFFtxjMeB1EWe39MgIaowrmv:NIaoWqqIaoWqMWV4VwBEhyGtxwSgIao7
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2