17663de3b5590994b113887514c3d108e9e34cb3ad4487e2eafcf824044ea632 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17663de3b5590994b113887514c3d108e9e34cb3ad4487e2eafcf824044ea632
Size

88KB
Sample

221003-tqx6tsedd2
MD5

5b5d924e1f57f965b630f76ca67a78e0
SHA1

558e3d39e536050f2096a70490cb15b8341c4525
SHA256

17663de3b5590994b113887514c3d108e9e34cb3ad4487e2eafcf824044ea632
SHA512

20a0abf003823ff88221fe159d2a8ad713900fc9758f4c807c08109c016a9b717cd4df7f45ad7c55d72843bc1f72e49e89b9b4ff79dcd5c9e82aa780bcfd22e0
SSDEEP

1536:wbNrxkeaUMzYurxQhfvbKkQI3yMp1xP93AT4JR7YNUsEkEs01V:wxpMzYsdMp1xVQT4Tql01V

Score

8^/10

Malware Config

Targets

- Target
  
  17663de3b5590994b113887514c3d108e9e34cb3ad4487e2eafcf824044ea632
- Size
  
  88KB
- MD5
  
  5b5d924e1f57f965b630f76ca67a78e0
- SHA1
  
  558e3d39e536050f2096a70490cb15b8341c4525
- SHA256
  
  17663de3b5590994b113887514c3d108e9e34cb3ad4487e2eafcf824044ea632
- SHA512
  
  20a0abf003823ff88221fe159d2a8ad713900fc9758f4c807c08109c016a9b717cd4df7f45ad7c55d72843bc1f72e49e89b9b4ff79dcd5c9e82aa780bcfd22e0
- SSDEEP
  
  1536:wbNrxkeaUMzYurxQhfvbKkQI3yMp1xP93AT4JR7YNUsEkEs01V:wxpMzYsdMp1xVQT4Tql01V
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2