6def99204354387bae81598cca608454c067d09f126c0adf5f981e5f8b0a03e6 | Triage

Sharing

General

Target

6def99204354387bae81598cca608454c067d09f126c0adf5f981e5f8b0a03e6
Size

946KB
Sample

221030-t563aabcer
MD5

81ec9fd7df3bf3041ad8f859f2ce5c94
SHA1

ccb08548d91e123b8249a67eb14bbccd632946f2
SHA256

6def99204354387bae81598cca608454c067d09f126c0adf5f981e5f8b0a03e6
SHA512

77613cc906710aca52a6913213901c60ba52605608194fd9d64135c423dfa0d773cdd75f14e568bca502f247bded0e768107dd5b65cc7fcb70a909fe862bfc74
SSDEEP

12288:BXuF2OPlgCxbUuqEolqhlBG0EZRYx35Ua8wvJfiU3us5NhOblYNTwUkVQ+PYJnS:BXuFhCwUuqDluBMfEhJX3z5mKhwbLenS

Score

7^/10

Malware Config

Targets

- Target
  
  6def99204354387bae81598cca608454c067d09f126c0adf5f981e5f8b0a03e6
- Size
  
  946KB
- MD5
  
  81ec9fd7df3bf3041ad8f859f2ce5c94
- SHA1
  
  ccb08548d91e123b8249a67eb14bbccd632946f2
- SHA256
  
  6def99204354387bae81598cca608454c067d09f126c0adf5f981e5f8b0a03e6
- SHA512
  
  77613cc906710aca52a6913213901c60ba52605608194fd9d64135c423dfa0d773cdd75f14e568bca502f247bded0e768107dd5b65cc7fcb70a909fe862bfc74
- SSDEEP
  
  12288:BXuF2OPlgCxbUuqEolqhlBG0EZRYx35Ua8wvJfiU3us5NhOblYNTwUkVQ+PYJnS:BXuFhCwUuqDluBMfEhJX3z5mKhwbLenS
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2