0a7ee7a8fd6905a397d077d96c1c2f0b6903b93030cd57968e8e74e43fca51d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a7ee7a8fd6905a397d077d96c1c2f0b6903b93030cd57968e8e74e43fca51d0
Size

710KB
Sample

221030-knsnwscfep
MD5

93c2a11644197bdfacbb45b0b410c39e
SHA1

880a2aea805f5de3fec91bb2127ce7bf5265620a
SHA256

0a7ee7a8fd6905a397d077d96c1c2f0b6903b93030cd57968e8e74e43fca51d0
SHA512

7d6115e4a651a0742c748f8217e4f835f1e09c888377326a951eaf565eec8cd49e8b35008f5d1604a9e1a71128be4dba2ec886508e21b5c07a7f61a9e3f976ef
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  0a7ee7a8fd6905a397d077d96c1c2f0b6903b93030cd57968e8e74e43fca51d0
- Size
  
  710KB
- MD5
  
  93c2a11644197bdfacbb45b0b410c39e
- SHA1
  
  880a2aea805f5de3fec91bb2127ce7bf5265620a
- SHA256
  
  0a7ee7a8fd6905a397d077d96c1c2f0b6903b93030cd57968e8e74e43fca51d0
- SHA512
  
  7d6115e4a651a0742c748f8217e4f835f1e09c888377326a951eaf565eec8cd49e8b35008f5d1604a9e1a71128be4dba2ec886508e21b5c07a7f61a9e3f976ef
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2