d55bdb0fa63d91e41ea2a9db1afd84f95bca5ca5c789e14fc9c7547c18ca8bf6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d55bdb0fa63d91e41ea2a9db1afd84f95bca5ca5c789e14fc9c7547c18ca8bf6
Size

224KB
Sample

221020-tkz38scfal
MD5

a005ce96a532b35ee2bed676c1a18d40
SHA1

0784ce5ad177bd4d11b1f97e4411abf2331f3698
SHA256

d55bdb0fa63d91e41ea2a9db1afd84f95bca5ca5c789e14fc9c7547c18ca8bf6
SHA512

18fcc4cd5af01494ccb8ff0449b91c0872e0a57a50f6724fd2c668f1d3c3575fe1356a0531ea7c5c0ca711eff5fe7668c3d01072a0f15d700e3bdfca6f10c830
SSDEEP

3072:Gu/KGr6gmVhCjG8G3GbGVGBGfGuGxGWYcrf6Kadk:GuSGLMAYcD6Kad

Score

8^/10

Malware Config

Targets

- Target
  
  d55bdb0fa63d91e41ea2a9db1afd84f95bca5ca5c789e14fc9c7547c18ca8bf6
- Size
  
  224KB
- MD5
  
  a005ce96a532b35ee2bed676c1a18d40
- SHA1
  
  0784ce5ad177bd4d11b1f97e4411abf2331f3698
- SHA256
  
  d55bdb0fa63d91e41ea2a9db1afd84f95bca5ca5c789e14fc9c7547c18ca8bf6
- SHA512
  
  18fcc4cd5af01494ccb8ff0449b91c0872e0a57a50f6724fd2c668f1d3c3575fe1356a0531ea7c5c0ca711eff5fe7668c3d01072a0f15d700e3bdfca6f10c830
- SSDEEP
  
  3072:Gu/KGr6gmVhCjG8G3GbGVGBGfGuGxGWYcrf6Kadk:GuSGLMAYcD6Kad
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2