2f499bdf1da77bc4cc303d4b61f21b1358918534d94f08976d6e42d58ad45731 | Triage

Sharing

General

Target

2f499bdf1da77bc4cc303d4b61f21b1358918534d94f08976d6e42d58ad45731
Size

128KB
Sample

221018-lglsfafedm
MD5

58d9456abf82f1220e3054ebe9490936
SHA1

905951e8d014248612559470c6fb640ea30a3c16
SHA256

2f499bdf1da77bc4cc303d4b61f21b1358918534d94f08976d6e42d58ad45731
SHA512

e0c033b484dac48d0bd238c8ddb1f691baa672ad26857363dd581d9b9a49bcd3ac6d00e5c12ebc479446a5c5d20d881594a876d3aaa0ed9c0a963a086d29f995
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbEceB:V6a+pOtEvwDpjt22E

Score

8^/10

Malware Config

Targets

- Target
  
  2f499bdf1da77bc4cc303d4b61f21b1358918534d94f08976d6e42d58ad45731
- Size
  
  128KB
- MD5
  
  58d9456abf82f1220e3054ebe9490936
- SHA1
  
  905951e8d014248612559470c6fb640ea30a3c16
- SHA256
  
  2f499bdf1da77bc4cc303d4b61f21b1358918534d94f08976d6e42d58ad45731
- SHA512
  
  e0c033b484dac48d0bd238c8ddb1f691baa672ad26857363dd581d9b9a49bcd3ac6d00e5c12ebc479446a5c5d20d881594a876d3aaa0ed9c0a963a086d29f995
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbEceB:V6a+pOtEvwDpjt22E
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2