222ba8c80f546fb4ccaca981f2a9fb3da9e76e361cf6ba1d9b2f7d3df6dd52c9 | Triage

Sharing

General

Target

222ba8c80f546fb4ccaca981f2a9fb3da9e76e361cf6ba1d9b2f7d3df6dd52c9
Size

2.0MB
Sample

220923-jtll4adee2
MD5

b46181f338bdc82a2b563738096e2c41
SHA1

d2681ed72f2f7bc5715106eb5c32c65c609ec647
SHA256

222ba8c80f546fb4ccaca981f2a9fb3da9e76e361cf6ba1d9b2f7d3df6dd52c9
SHA512

f485e6069d573f95744cd18198b90e99972ec9b5af212c7474a5d9c304f089fed03ce2ef029fbabdc9be5abb6a5340e965414454c05f04911c5cf2549abb03f9
SSDEEP

49152:/eZBYBfJXAEM+SgouTJxeY3kkFhda8+kB7spDj2U6MtqXB:/eZBYBfKEM+SbuTjdkA/+kBUvzns

Score

7^/10

Malware Config

Targets

- Target
  
  222ba8c80f546fb4ccaca981f2a9fb3da9e76e361cf6ba1d9b2f7d3df6dd52c9
- Size
  
  2.0MB
- MD5
  
  b46181f338bdc82a2b563738096e2c41
- SHA1
  
  d2681ed72f2f7bc5715106eb5c32c65c609ec647
- SHA256
  
  222ba8c80f546fb4ccaca981f2a9fb3da9e76e361cf6ba1d9b2f7d3df6dd52c9
- SHA512
  
  f485e6069d573f95744cd18198b90e99972ec9b5af212c7474a5d9c304f089fed03ce2ef029fbabdc9be5abb6a5340e965414454c05f04911c5cf2549abb03f9
- SSDEEP
  
  49152:/eZBYBfJXAEM+SgouTJxeY3kkFhda8+kB7spDj2U6MtqXB:/eZBYBfKEM+SbuTjdkA/+kBUvzns
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1