7bdc04b34c0318f4a6afa011a6546ebf8b3f6006510c75d3562afc0849aed1e2 | Triage

Sharing

General

Target

7bdc04b34c0318f4a6afa011a6546ebf8b3f6006510c75d3562afc0849aed1e2
Size

224KB
Sample

221020-tk987scfbl
MD5

a012e72cac560d4805b70afa9930ccfe
SHA1

81126e58692c1512d0ce7a6a0404b8519af3159f
SHA256

7bdc04b34c0318f4a6afa011a6546ebf8b3f6006510c75d3562afc0849aed1e2
SHA512

f6af7037021c4ed34c19d0183b8dd048ccfa8b682732b0ca156c206f0831601c7e1c9b5d239f838881adf2302d924bbcf4fd4d0dadd798475858491dbab6a05f
SSDEEP

3072:G3RKJpf0yxbKhhCjG8G3GbGVGBGfGuGxGWYcrf6Kad0:G3gJp8yghAYcD6Kad

Score

8^/10

Malware Config

Targets

- Target
  
  7bdc04b34c0318f4a6afa011a6546ebf8b3f6006510c75d3562afc0849aed1e2
- Size
  
  224KB
- MD5
  
  a012e72cac560d4805b70afa9930ccfe
- SHA1
  
  81126e58692c1512d0ce7a6a0404b8519af3159f
- SHA256
  
  7bdc04b34c0318f4a6afa011a6546ebf8b3f6006510c75d3562afc0849aed1e2
- SHA512
  
  f6af7037021c4ed34c19d0183b8dd048ccfa8b682732b0ca156c206f0831601c7e1c9b5d239f838881adf2302d924bbcf4fd4d0dadd798475858491dbab6a05f
- SSDEEP
  
  3072:G3RKJpf0yxbKhhCjG8G3GbGVGBGfGuGxGWYcrf6Kad0:G3gJp8yghAYcD6Kad
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2