2f7d732ca55e2699886c15851395c26ab7b27132ed9df40fb2429903ed2f3a6c | Triage

Sharing

General

Target

2f7d732ca55e2699886c15851395c26ab7b27132ed9df40fb2429903ed2f3a6c
Size

627KB
Sample

221030-knfpbscfdn
MD5

a2b8075d8a66e5c7ac2af2d5636c85e0
SHA1

28c4e814f91e7cb340b9707570f39cab6199e49a
SHA256

2f7d732ca55e2699886c15851395c26ab7b27132ed9df40fb2429903ed2f3a6c
SHA512

a9cfd68bc421c5607d551ab281c94132856d61ffc32ddcca8907f2f8bcf10711096a4d7defabc893b6ad93517b51c7eac2e13691c8b9385baf4fa4ce24130927
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  2f7d732ca55e2699886c15851395c26ab7b27132ed9df40fb2429903ed2f3a6c
- Size
  
  627KB
- MD5
  
  a2b8075d8a66e5c7ac2af2d5636c85e0
- SHA1
  
  28c4e814f91e7cb340b9707570f39cab6199e49a
- SHA256
  
  2f7d732ca55e2699886c15851395c26ab7b27132ed9df40fb2429903ed2f3a6c
- SHA512
  
  a9cfd68bc421c5607d551ab281c94132856d61ffc32ddcca8907f2f8bcf10711096a4d7defabc893b6ad93517b51c7eac2e13691c8b9385baf4fa4ce24130927
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2