a3af75b70292fd289be528013bbf9f4d2ddfd89812cf44f772b872e4363c1d94 | Triage

Sharing

General

Target

a3af75b70292fd289be528013bbf9f4d2ddfd89812cf44f772b872e4363c1d94
Size

658KB
Sample

221021-f64rnadhe6
MD5

732d5b5bdbcb7e6e110f19b42a31c3c0
SHA1

e720df01778e30627609fbb4cebcc3d7f3b1b9af
SHA256

a3af75b70292fd289be528013bbf9f4d2ddfd89812cf44f772b872e4363c1d94
SHA512

85eb27e02d8d1e766ec71735e62f73d4ee5005e824df26a30aea4b972fc048970457ff16d22873dbd35d5ce7973f90cac4b723ca975a558ee489446c1be22edb
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  a3af75b70292fd289be528013bbf9f4d2ddfd89812cf44f772b872e4363c1d94
- Size
  
  658KB
- MD5
  
  732d5b5bdbcb7e6e110f19b42a31c3c0
- SHA1
  
  e720df01778e30627609fbb4cebcc3d7f3b1b9af
- SHA256
  
  a3af75b70292fd289be528013bbf9f4d2ddfd89812cf44f772b872e4363c1d94
- SHA512
  
  85eb27e02d8d1e766ec71735e62f73d4ee5005e824df26a30aea4b972fc048970457ff16d22873dbd35d5ce7973f90cac4b723ca975a558ee489446c1be22edb
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2