a2f4774fac10e5526331282031777388d41f1a8eb7fae04934d31f7a060641a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2f4774fac10e5526331282031777388d41f1a8eb7fae04934d31f7a060641a6
Size

224KB
Sample

221020-tk67jscfar
MD5

a080a33db79936f2c656884db3f97d10
SHA1

e4298687bdab191a74938f6384228ab4c5f42a8b
SHA256

a2f4774fac10e5526331282031777388d41f1a8eb7fae04934d31f7a060641a6
SHA512

ccd94038387ea06d90076e46494c959e3fddbfedea453c2a069146831dc612844188c99c8883477efe87fa1d76f30c805f97c3a934eeae04e57a271acbbb076b
SSDEEP

3072:G89KNEW0vhCjG8G3GbGVGBGfGuGxGWYcrf6Kad0:G80NEW0vAYcD6Kad

Score

8^/10

Malware Config

Targets

- Target
  
  a2f4774fac10e5526331282031777388d41f1a8eb7fae04934d31f7a060641a6
- Size
  
  224KB
- MD5
  
  a080a33db79936f2c656884db3f97d10
- SHA1
  
  e4298687bdab191a74938f6384228ab4c5f42a8b
- SHA256
  
  a2f4774fac10e5526331282031777388d41f1a8eb7fae04934d31f7a060641a6
- SHA512
  
  ccd94038387ea06d90076e46494c959e3fddbfedea453c2a069146831dc612844188c99c8883477efe87fa1d76f30c805f97c3a934eeae04e57a271acbbb076b
- SSDEEP
  
  3072:G89KNEW0vhCjG8G3GbGVGBGfGuGxGWYcrf6Kad0:G80NEW0vAYcD6Kad
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2