b7f5e07e50a5e94d512ef101b418565dddc91f3e8ac778aa3c4b78300b9da973 | Triage

Sharing

General

Target

b7f5e07e50a5e94d512ef101b418565dddc91f3e8ac778aa3c4b78300b9da973
Size

682KB
Sample

221020-h16eeaahgl
MD5

5d2e669eea2c596d0cd8037938a1bda0
SHA1

37be47a9ce22ddbd3190b656a25420863a5e9b93
SHA256

b7f5e07e50a5e94d512ef101b418565dddc91f3e8ac778aa3c4b78300b9da973
SHA512

ae57043b12504fb513ab27bf38d3a3ec54cac0bb1ea7dc1fb68e9c0f42faffacc0d785a9b6e53a6c8f49266c76f3724979d9e3f9bb4d1ecb1a0d9f0db585e9dc
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  b7f5e07e50a5e94d512ef101b418565dddc91f3e8ac778aa3c4b78300b9da973
- Size
  
  682KB
- MD5
  
  5d2e669eea2c596d0cd8037938a1bda0
- SHA1
  
  37be47a9ce22ddbd3190b656a25420863a5e9b93
- SHA256
  
  b7f5e07e50a5e94d512ef101b418565dddc91f3e8ac778aa3c4b78300b9da973
- SHA512
  
  ae57043b12504fb513ab27bf38d3a3ec54cac0bb1ea7dc1fb68e9c0f42faffacc0d785a9b6e53a6c8f49266c76f3724979d9e3f9bb4d1ecb1a0d9f0db585e9dc
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2