9d277f466918cf3ae3d3559a8fc4398ae99fc09256dbda356e4564c0b183095c | Triage

Sharing

General

Target

9d277f466918cf3ae3d3559a8fc4398ae99fc09256dbda356e4564c0b183095c
Size

18KB
Sample

221029-ylqy6scfb9
MD5

a39fe220372d51a7dfa8e8034cce37e0
SHA1

834e93b93edd0cdd80f7089d623f87a330d91777
SHA256

9d277f466918cf3ae3d3559a8fc4398ae99fc09256dbda356e4564c0b183095c
SHA512

f815ad6d34f2d82109fe2f9f4be98f9071a1181b6747a974a08af4bf3856dcfaaceafffdb59283b752613b62cd6688333d385e362265f4d01ae0007fd77c975b
SSDEEP

384:fY/7iMmQgVC+02JWuCSPmSQTebw/UqFPpF5k:y12JTPRQTeZq1S

Score

8^/10

Malware Config

Targets

- Target
  
  9d277f466918cf3ae3d3559a8fc4398ae99fc09256dbda356e4564c0b183095c
- Size
  
  18KB
- MD5
  
  a39fe220372d51a7dfa8e8034cce37e0
- SHA1
  
  834e93b93edd0cdd80f7089d623f87a330d91777
- SHA256
  
  9d277f466918cf3ae3d3559a8fc4398ae99fc09256dbda356e4564c0b183095c
- SHA512
  
  f815ad6d34f2d82109fe2f9f4be98f9071a1181b6747a974a08af4bf3856dcfaaceafffdb59283b752613b62cd6688333d385e362265f4d01ae0007fd77c975b
- SSDEEP
  
  384:fY/7iMmQgVC+02JWuCSPmSQTebw/UqFPpF5k:y12JTPRQTeZq1S
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2