82e94ffd18d0f88b45f1efa320df88b71ad60a9a9e1db341e88194493b8529d9 | Triage

Sharing

General

Target

82e94ffd18d0f88b45f1efa320df88b71ad60a9a9e1db341e88194493b8529d9
Size

224KB
Sample

221019-snretsdcc7
MD5

a1a9b0905846ba3ff5b9cdae7f726640
SHA1

f451664d536537056ababf4a3df1c39a1774b068
SHA256

82e94ffd18d0f88b45f1efa320df88b71ad60a9a9e1db341e88194493b8529d9
SHA512

1c0c4a105e8daeb3679880b881d83de2704857ea20878b527d96a3b2b0447260e74d52be7001313b0af18c40828b3e434009ad6a2899356c3b3b2f1124175393
SSDEEP

3072:Gj2KVHtrIThCjG8G3GbGVGBGfGuGxGWYcrf6KadE:Gj3VdUAYcD6Kad

Score

8^/10

Malware Config

Targets

- Target
  
  82e94ffd18d0f88b45f1efa320df88b71ad60a9a9e1db341e88194493b8529d9
- Size
  
  224KB
- MD5
  
  a1a9b0905846ba3ff5b9cdae7f726640
- SHA1
  
  f451664d536537056ababf4a3df1c39a1774b068
- SHA256
  
  82e94ffd18d0f88b45f1efa320df88b71ad60a9a9e1db341e88194493b8529d9
- SHA512
  
  1c0c4a105e8daeb3679880b881d83de2704857ea20878b527d96a3b2b0447260e74d52be7001313b0af18c40828b3e434009ad6a2899356c3b3b2f1124175393
- SSDEEP
  
  3072:Gj2KVHtrIThCjG8G3GbGVGBGfGuGxGWYcrf6KadE:Gj3VdUAYcD6Kad
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2