69d128d489d053cbfa9616e1987514ce5a58136d7ac11179df8e7451b8fdd5e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69d128d489d053cbfa9616e1987514ce5a58136d7ac11179df8e7451b8fdd5e6
Size

609KB
Sample

221021-f7rtgsdgcn
MD5

75a31ef65ce6a5f3a94aa9c320ead980
SHA1

ed30fd043b97cbdf916d60c897099a96bcb0e644
SHA256

69d128d489d053cbfa9616e1987514ce5a58136d7ac11179df8e7451b8fdd5e6
SHA512

6036448b36d9a9342699e3a53b823104e0668f98ef1b9631bcb52aa445d8e188b831612490da59d2e47cceda20afecae69150598aca8f464c7c47b23b77ca8b4
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  69d128d489d053cbfa9616e1987514ce5a58136d7ac11179df8e7451b8fdd5e6
- Size
  
  609KB
- MD5
  
  75a31ef65ce6a5f3a94aa9c320ead980
- SHA1
  
  ed30fd043b97cbdf916d60c897099a96bcb0e644
- SHA256
  
  69d128d489d053cbfa9616e1987514ce5a58136d7ac11179df8e7451b8fdd5e6
- SHA512
  
  6036448b36d9a9342699e3a53b823104e0668f98ef1b9631bcb52aa445d8e188b831612490da59d2e47cceda20afecae69150598aca8f464c7c47b23b77ca8b4
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2