7bb1c7fb8f2084cd13fa7fded01a76468be702f5c4135d256b125d46ce1c8d05 | Triage

Sharing

General

Target

7bb1c7fb8f2084cd13fa7fded01a76468be702f5c4135d256b125d46ce1c8d05
Size

655KB
Sample

221107-hc4wnsehar
MD5

0521874c4275011303c6826cf0a82e00
SHA1

1a6d041bca93bbcd3b54c0cc8518da84f9d8d672
SHA256

7bb1c7fb8f2084cd13fa7fded01a76468be702f5c4135d256b125d46ce1c8d05
SHA512

13eda3e2a0d260aa14460acfcf99228677d2d7228f190dc846f11a8a702a2f482a4615186718f67554c297e411cf2fd30ffc9cedb56ea1619035e9531ff298b1
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  7bb1c7fb8f2084cd13fa7fded01a76468be702f5c4135d256b125d46ce1c8d05
- Size
  
  655KB
- MD5
  
  0521874c4275011303c6826cf0a82e00
- SHA1
  
  1a6d041bca93bbcd3b54c0cc8518da84f9d8d672
- SHA256
  
  7bb1c7fb8f2084cd13fa7fded01a76468be702f5c4135d256b125d46ce1c8d05
- SHA512
  
  13eda3e2a0d260aa14460acfcf99228677d2d7228f190dc846f11a8a702a2f482a4615186718f67554c297e411cf2fd30ffc9cedb56ea1619035e9531ff298b1
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2