403cd6ec56fd74984f269659e44862f9483073f691667fd37293e29fadaefce4 | Triage

Sharing

General

Target

403cd6ec56fd74984f269659e44862f9483073f691667fd37293e29fadaefce4
Size

28KB
Sample

221020-kw7g1seecp
MD5

451c466132179a7be31a0099aca8eac0
SHA1

0cbbd6f3237a98a89bffbede5ca0118f99b59cef
SHA256

403cd6ec56fd74984f269659e44862f9483073f691667fd37293e29fadaefce4
SHA512

c861980c6155618a3058468d833a0ca2f02f3806b6ee1b8b176050ad5d6e96a1387a03e35c9423c98d8b63d171e16b575ff9401e1f7face5b1e995d160bce4e6
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4Q:btB9g/WItCSsAGjX7H

Score

8^/10

Malware Config

Targets

- Target
  
  403cd6ec56fd74984f269659e44862f9483073f691667fd37293e29fadaefce4
- Size
  
  28KB
- MD5
  
  451c466132179a7be31a0099aca8eac0
- SHA1
  
  0cbbd6f3237a98a89bffbede5ca0118f99b59cef
- SHA256
  
  403cd6ec56fd74984f269659e44862f9483073f691667fd37293e29fadaefce4
- SHA512
  
  c861980c6155618a3058468d833a0ca2f02f3806b6ee1b8b176050ad5d6e96a1387a03e35c9423c98d8b63d171e16b575ff9401e1f7face5b1e995d160bce4e6
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4Q:btB9g/WItCSsAGjX7H
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2