36b9adf7e6cbe92dad0b9a3787ad88c33be442c928df9c10d4438a6137cdd6dd | Triage

Sharing

General

Target

36b9adf7e6cbe92dad0b9a3787ad88c33be442c928df9c10d4438a6137cdd6dd
Size

381KB
Sample

221011-jw1tssddbm
MD5

61c4e332a08348fdec0ac655afc48f00
SHA1

168daf015d9fe0cf409030d1ed8d9f6d04f79f7d
SHA256

36b9adf7e6cbe92dad0b9a3787ad88c33be442c928df9c10d4438a6137cdd6dd
SHA512

b9e7e198945c52a775bb2b2aa1af877d98a452ddba95f52c380a9fc2711371ab29cf1eced1e227029997d3d34e7dc82504096b455a89da487aed721eec1ea002
SSDEEP

3072:CcwPgOm8JBcvT1lK+qjGGcoeLBPCwZ3HvJ8y:CcUsG2hlHqzM9RH

Score

8^/10

Malware Config

Targets

- Target
  
  36b9adf7e6cbe92dad0b9a3787ad88c33be442c928df9c10d4438a6137cdd6dd
- Size
  
  381KB
- MD5
  
  61c4e332a08348fdec0ac655afc48f00
- SHA1
  
  168daf015d9fe0cf409030d1ed8d9f6d04f79f7d
- SHA256
  
  36b9adf7e6cbe92dad0b9a3787ad88c33be442c928df9c10d4438a6137cdd6dd
- SHA512
  
  b9e7e198945c52a775bb2b2aa1af877d98a452ddba95f52c380a9fc2711371ab29cf1eced1e227029997d3d34e7dc82504096b455a89da487aed721eec1ea002
- SSDEEP
  
  3072:CcwPgOm8JBcvT1lK+qjGGcoeLBPCwZ3HvJ8y:CcUsG2hlHqzM9RH
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2