a6b1d10c312b7cef28f9956566c93410b8b91db966b7188290b4cf7fb5ec0c27 | Triage

Sharing

General

Target

a6b1d10c312b7cef28f9956566c93410b8b91db966b7188290b4cf7fb5ec0c27
Size

3.3MB
Sample

221028-yd7lyscga5
MD5

63f06729e6457ce47ff718bc103d7750
SHA1

ad86c7fa5df1b5cbbf5c7e97e3d1e4b0b5d28ac2
SHA256

a6b1d10c312b7cef28f9956566c93410b8b91db966b7188290b4cf7fb5ec0c27
SHA512

6b2d1a5632a83f87d7109fb1ab69d98440dd03cb352b4345ca1e01b9837e79526271bc37e1be0fc252f82c18b19a5df432bed074d32d3731d2f47344946e9ebd
SSDEEP

49152:ksX/89pHchWUIYNO8IWhU4OA7I3yUSR7v07pmPoTAIA9ktw3suwtTgX7IqnLwcXL:DX/qHwWPYA8IWh3mSRApLAgxuwe0LUKY

Score

8^/10

Malware Config

Targets

- Target
  
  a6b1d10c312b7cef28f9956566c93410b8b91db966b7188290b4cf7fb5ec0c27
- Size
  
  3.3MB
- MD5
  
  63f06729e6457ce47ff718bc103d7750
- SHA1
  
  ad86c7fa5df1b5cbbf5c7e97e3d1e4b0b5d28ac2
- SHA256
  
  a6b1d10c312b7cef28f9956566c93410b8b91db966b7188290b4cf7fb5ec0c27
- SHA512
  
  6b2d1a5632a83f87d7109fb1ab69d98440dd03cb352b4345ca1e01b9837e79526271bc37e1be0fc252f82c18b19a5df432bed074d32d3731d2f47344946e9ebd
- SSDEEP
  
  49152:ksX/89pHchWUIYNO8IWhU4OA7I3yUSR7v07pmPoTAIA9ktw3suwtTgX7IqnLwcXL:DX/qHwWPYA8IWh3mSRApLAgxuwe0LUKY
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2