71535fce2373744f5daeaa60efecb805a228e5e988dc2f68e504d31752f402f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71535fce2373744f5daeaa60efecb805a228e5e988dc2f68e504d31752f402f1
Size

676KB
Sample

221106-ftxsksgbgl
MD5

09a9476fcef04898eaae48d5f7e737e0
SHA1

6f849f53d358947b48ea928cda82c9103b9e1104
SHA256

71535fce2373744f5daeaa60efecb805a228e5e988dc2f68e504d31752f402f1
SHA512

3c1d92babee6af1bd655258d9d0230480cddcffb3c366eb890c372915c0426a55a49085dc18335f3051cf373b7a129cf2f893d51aa83009a39f65a44fb052fd5
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  71535fce2373744f5daeaa60efecb805a228e5e988dc2f68e504d31752f402f1
- Size
  
  676KB
- MD5
  
  09a9476fcef04898eaae48d5f7e737e0
- SHA1
  
  6f849f53d358947b48ea928cda82c9103b9e1104
- SHA256
  
  71535fce2373744f5daeaa60efecb805a228e5e988dc2f68e504d31752f402f1
- SHA512
  
  3c1d92babee6af1bd655258d9d0230480cddcffb3c366eb890c372915c0426a55a49085dc18335f3051cf373b7a129cf2f893d51aa83009a39f65a44fb052fd5
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2