84c5a11552eda0feab083594d6a1ee1f275769c20978d4347ade1f168ff52ed6 | Triage

Sharing

General

Target

84c5a11552eda0feab083594d6a1ee1f275769c20978d4347ade1f168ff52ed6
Size

750KB
Sample

221020-bbnpqsffg7
MD5

91396b48fe4097dc4cac1236734d9030
SHA1

f60b7690a14c7680b80508bc832bb7fb9e032183
SHA256

84c5a11552eda0feab083594d6a1ee1f275769c20978d4347ade1f168ff52ed6
SHA512

4680c53a7b896a9f7cfd316bffbc801e35cc6ffbde0c86278a136a73fab891765b7303da1104e9756cabc0ab1711a9087d681abadc5b9d780dc6a4968457baf0
SSDEEP

12288:RDGJuO8TJMn/h0a8ntcw/zfZkjN3lUmF2bCPVjQiuOwJN48RWwyuEyuUDodXGEXS:RSJu7AhV8tcw7Z+NRF2uP65FJtwwZ5oY

Score

8^/10

Malware Config

Targets

- Target
  
  84c5a11552eda0feab083594d6a1ee1f275769c20978d4347ade1f168ff52ed6
- Size
  
  750KB
- MD5
  
  91396b48fe4097dc4cac1236734d9030
- SHA1
  
  f60b7690a14c7680b80508bc832bb7fb9e032183
- SHA256
  
  84c5a11552eda0feab083594d6a1ee1f275769c20978d4347ade1f168ff52ed6
- SHA512
  
  4680c53a7b896a9f7cfd316bffbc801e35cc6ffbde0c86278a136a73fab891765b7303da1104e9756cabc0ab1711a9087d681abadc5b9d780dc6a4968457baf0
- SSDEEP
  
  12288:RDGJuO8TJMn/h0a8ntcw/zfZkjN3lUmF2bCPVjQiuOwJN48RWwyuEyuUDodXGEXS:RSJu7AhV8tcw7Z+NRF2uP65FJtwwZ5oY
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2