80950dc87e434f588ad24bee6677d1c1ee055efd4fac9067ac5a382f1cd92093 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

80950dc87e434f588ad24bee6677d1c1ee055efd4fac9067ac5a382f1cd92093
Size

33KB
Sample

221018-nf2tdafhal
MD5

b41c7ced77a8ac7eadaf1a35a75ba674
SHA1

e2404cb2df08eab6e755c4557cebb1720e6fd0d0
SHA256

80950dc87e434f588ad24bee6677d1c1ee055efd4fac9067ac5a382f1cd92093
SHA512

2bd09969e231304a6e4af1580414a079e45f2251bc7eb47affb204d0d36a3428c834d944da6fdf81887a4b809d5ad5279cd65c1e5669d7529619b8b9b06860cc
SSDEEP

192:mB1YtKJQWRRHJvbxJYBhuIIqIIxzcdT/31YeJ8Xn5+8bQoXSQqlcQy4:mB1JQWRRHlcrzXpn5tR0cs

Score

8^/10

Malware Config

Targets

- Target
  
  80950dc87e434f588ad24bee6677d1c1ee055efd4fac9067ac5a382f1cd92093
- Size
  
  33KB
- MD5
  
  b41c7ced77a8ac7eadaf1a35a75ba674
- SHA1
  
  e2404cb2df08eab6e755c4557cebb1720e6fd0d0
- SHA256
  
  80950dc87e434f588ad24bee6677d1c1ee055efd4fac9067ac5a382f1cd92093
- SHA512
  
  2bd09969e231304a6e4af1580414a079e45f2251bc7eb47affb204d0d36a3428c834d944da6fdf81887a4b809d5ad5279cd65c1e5669d7529619b8b9b06860cc
- SSDEEP
  
  192:mB1YtKJQWRRHJvbxJYBhuIIqIIxzcdT/31YeJ8Xn5+8bQoXSQqlcQy4:mB1JQWRRHlcrzXpn5tR0cs
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2