0d17f15ac8cc5edfacfeec9330647c759379dc143bd9fd55ef7140297aa57b05 | Triage

Sharing

General

Target

0d17f15ac8cc5edfacfeec9330647c759379dc143bd9fd55ef7140297aa57b05
Size

18KB
Sample

221002-k6dyfsaahj
MD5

6fb05fcea11bd67403a29e2ceb6d7bb0
SHA1

e8fc6ed6657a3c94c313f69dec7a16ff9f7721bf
SHA256

0d17f15ac8cc5edfacfeec9330647c759379dc143bd9fd55ef7140297aa57b05
SHA512

fbdd575633e7b56228b902dd4fe5268c89883aff05dafacb332e8707e6534be112001dc39b213bfb34db79d330415a9fa68e9e7004831ecc6cafdafafd379db7
SSDEEP

192:nybK1GyeZuVIocBkAs4bdNFV1gSD1FcfJANOjQm8UtgLCVNEMZX:nN8CcBkj4bdNFP5D1aGOUUS6H

Score

8^/10

Malware Config

Targets

- Target
  
  0d17f15ac8cc5edfacfeec9330647c759379dc143bd9fd55ef7140297aa57b05
- Size
  
  18KB
- MD5
  
  6fb05fcea11bd67403a29e2ceb6d7bb0
- SHA1
  
  e8fc6ed6657a3c94c313f69dec7a16ff9f7721bf
- SHA256
  
  0d17f15ac8cc5edfacfeec9330647c759379dc143bd9fd55ef7140297aa57b05
- SHA512
  
  fbdd575633e7b56228b902dd4fe5268c89883aff05dafacb332e8707e6534be112001dc39b213bfb34db79d330415a9fa68e9e7004831ecc6cafdafafd379db7
- SSDEEP
  
  192:nybK1GyeZuVIocBkAs4bdNFV1gSD1FcfJANOjQm8UtgLCVNEMZX:nN8CcBkj4bdNFP5D1aGOUUS6H
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2