18d3f3e402b2fd7ffd411c888feb27e271d1f8ad07c7ce340619b39867687c8a | Triage

Sharing

General

Target

18d3f3e402b2fd7ffd411c888feb27e271d1f8ad07c7ce340619b39867687c8a
Size

371KB
Sample

221011-eqqdnadge8
MD5

4097ff89442890c9ed9e8034d9c6a160
SHA1

1a7a3602b4c358341c29c6c36e02604a61a8e53f
SHA256

18d3f3e402b2fd7ffd411c888feb27e271d1f8ad07c7ce340619b39867687c8a
SHA512

1d8e8d1c07374c184417f7b41ec9ea1420b886d23340ef8c97baf181cbd0e7dff1edeacc0f8250e329f2a8a3909d3d5ed28ff48d5f50065bd870006c207f1a07
SSDEEP

6144:qX/b8A09lO0R2sGMCWptdPeRcEiILM/M44Le9Jrk4rReJOJzjeukcVq:qX/b8x9lO0R2sXtwRcEiiv44Levrk0qp

Score

8^/10

Malware Config

Targets

- Target
  
  18d3f3e402b2fd7ffd411c888feb27e271d1f8ad07c7ce340619b39867687c8a
- Size
  
  371KB
- MD5
  
  4097ff89442890c9ed9e8034d9c6a160
- SHA1
  
  1a7a3602b4c358341c29c6c36e02604a61a8e53f
- SHA256
  
  18d3f3e402b2fd7ffd411c888feb27e271d1f8ad07c7ce340619b39867687c8a
- SHA512
  
  1d8e8d1c07374c184417f7b41ec9ea1420b886d23340ef8c97baf181cbd0e7dff1edeacc0f8250e329f2a8a3909d3d5ed28ff48d5f50065bd870006c207f1a07
- SSDEEP
  
  6144:qX/b8A09lO0R2sGMCWptdPeRcEiILM/M44Le9Jrk4rReJOJzjeukcVq:qX/b8x9lO0R2sXtwRcEiiv44Levrk0qp
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2