0a3a238c11090331ce6b24134f98c138cf2e2cf7f4f97447ed0a4dd4b864c972 | Triage

Sharing

General

Target

0a3a238c11090331ce6b24134f98c138cf2e2cf7f4f97447ed0a4dd4b864c972
Size

224KB
Sample

221019-sphjbadcg5
MD5

a0ce8322b58d1edf278f5f21cfb2c2d0
SHA1

67534bc140cfbdc87fc033b684a3af4cbc17a948
SHA256

0a3a238c11090331ce6b24134f98c138cf2e2cf7f4f97447ed0a4dd4b864c972
SHA512

36a4e1ddb62aedcf839f279950f821571c8fc975ca591e58f0c302380da6162d6834893a8f403606af08361ad02bd4ede683dc9cdbd2dc8ccc53a706671ad115
SSDEEP

3072:GWwKhhI1K6yI55hCjG8G3GbGVGBGfGuGxGWYcrf6Kad0:GW9j655AYcD6Kad

Score

8^/10

Malware Config

Targets

- Target
  
  0a3a238c11090331ce6b24134f98c138cf2e2cf7f4f97447ed0a4dd4b864c972
- Size
  
  224KB
- MD5
  
  a0ce8322b58d1edf278f5f21cfb2c2d0
- SHA1
  
  67534bc140cfbdc87fc033b684a3af4cbc17a948
- SHA256
  
  0a3a238c11090331ce6b24134f98c138cf2e2cf7f4f97447ed0a4dd4b864c972
- SHA512
  
  36a4e1ddb62aedcf839f279950f821571c8fc975ca591e58f0c302380da6162d6834893a8f403606af08361ad02bd4ede683dc9cdbd2dc8ccc53a706671ad115
- SSDEEP
  
  3072:GWwKhhI1K6yI55hCjG8G3GbGVGBGfGuGxGWYcrf6Kad0:GW9j655AYcD6Kad
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2