dbd7bbb4dea7859f3f23fdebcd751f9077289df8c2d0ac21c327f2eacd6d19e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbd7bbb4dea7859f3f23fdebcd751f9077289df8c2d0ac21c327f2eacd6d19e7
Size

88KB
Sample

221003-nyxmdaece7
MD5

30fae14b737a46a576f55325753c112c
SHA1

5cab8be05ea72824c0cfed4d7357218df485c3a3
SHA256

dbd7bbb4dea7859f3f23fdebcd751f9077289df8c2d0ac21c327f2eacd6d19e7
SHA512

eeda380cedb626af7e3e00e8f38c11c9e68cfead9c68b5a5abba159fefd2db740466a6533b7a119a463eaf96e91fec6f9aeeae2ef059658beea51ecd0e0ab12a
SSDEEP

1536:Hn/oYXON5n7svkh10LS9tHCGLlje4QCmmHjskWID:H/oBYv00LS9tHCG5TQCmmHjse

Score

8^/10

Malware Config

Targets

- Target
  
  dbd7bbb4dea7859f3f23fdebcd751f9077289df8c2d0ac21c327f2eacd6d19e7
- Size
  
  88KB
- MD5
  
  30fae14b737a46a576f55325753c112c
- SHA1
  
  5cab8be05ea72824c0cfed4d7357218df485c3a3
- SHA256
  
  dbd7bbb4dea7859f3f23fdebcd751f9077289df8c2d0ac21c327f2eacd6d19e7
- SHA512
  
  eeda380cedb626af7e3e00e8f38c11c9e68cfead9c68b5a5abba159fefd2db740466a6533b7a119a463eaf96e91fec6f9aeeae2ef059658beea51ecd0e0ab12a
- SSDEEP
  
  1536:Hn/oYXON5n7svkh10LS9tHCGLlje4QCmmHjskWID:H/oBYv00LS9tHCG5TQCmmHjse
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2