592ee7b0ddb4df10594e89695a274612073ea1001cdc5f4bc35392e6797f71a8 | Triage

Sharing

General

Target

592ee7b0ddb4df10594e89695a274612073ea1001cdc5f4bc35392e6797f71a8
Size

850KB
Sample

221029-qamhlsgdf2
MD5

ef23ad78508950e75894b846d1327c2b
SHA1

b5e3e1f9a3c157361621ecb3a0bfcd48234a9f7f
SHA256

592ee7b0ddb4df10594e89695a274612073ea1001cdc5f4bc35392e6797f71a8
SHA512

0e8c600555defff949bde69c7e3129e06b2e8efe56cbef6da767b778107b5bddb899379d8705ae79b86c5cc899c2cc8e904a1f993ba111e38864d0e73bc51455
SSDEEP

12288:Dr6JiSK2mXyP85SqM5mZ67l03Tq/wiIzy4PdCmvpeqz8/9tRatjSmphL2VPifd:n6UzdyP267C3T4eZ5kqQ9jatnhL20d

Score

7^/10

Malware Config

Targets

- Target
  
  592ee7b0ddb4df10594e89695a274612073ea1001cdc5f4bc35392e6797f71a8
- Size
  
  850KB
- MD5
  
  ef23ad78508950e75894b846d1327c2b
- SHA1
  
  b5e3e1f9a3c157361621ecb3a0bfcd48234a9f7f
- SHA256
  
  592ee7b0ddb4df10594e89695a274612073ea1001cdc5f4bc35392e6797f71a8
- SHA512
  
  0e8c600555defff949bde69c7e3129e06b2e8efe56cbef6da767b778107b5bddb899379d8705ae79b86c5cc899c2cc8e904a1f993ba111e38864d0e73bc51455
- SSDEEP
  
  12288:Dr6JiSK2mXyP85SqM5mZ67l03Tq/wiIzy4PdCmvpeqz8/9tRatjSmphL2VPifd:n6UzdyP267C3T4eZ5kqQ9jatnhL20d
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2