ab83fd710af4819b81756d18cf733fecb3b1a487b2c5d6cadf81c1c6ac47e4df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab83fd710af4819b81756d18cf733fecb3b1a487b2c5d6cadf81c1c6ac47e4df
Size

317KB
Sample

221107-kyvw1abdbp
MD5

7f0526c515bf9f73c07b773667a02f1b
SHA1

d84838d52db6aa1c9e7cd606005eaff3af3b6561
SHA256

ab83fd710af4819b81756d18cf733fecb3b1a487b2c5d6cadf81c1c6ac47e4df
SHA512

95806e9acb3622fd491d28d4f4c05bd7abe7a72ffd8941aa66bc8f2e0c66515e943dac4a16c3a4f58a05f0d8b158e3e90cf175f8e9abf577d0308eeaa5a2a71a
SSDEEP

6144:+0YjywDhq1doBLbii5bkgVuN+xSKV7Wkrsf7LsOSfXVB8KC9bV:+0AywDhwdiXikbkgaISKVJXv8z9h

Score

8^/10

Malware Config

Targets

- Target
  
  ab83fd710af4819b81756d18cf733fecb3b1a487b2c5d6cadf81c1c6ac47e4df
- Size
  
  317KB
- MD5
  
  7f0526c515bf9f73c07b773667a02f1b
- SHA1
  
  d84838d52db6aa1c9e7cd606005eaff3af3b6561
- SHA256
  
  ab83fd710af4819b81756d18cf733fecb3b1a487b2c5d6cadf81c1c6ac47e4df
- SHA512
  
  95806e9acb3622fd491d28d4f4c05bd7abe7a72ffd8941aa66bc8f2e0c66515e943dac4a16c3a4f58a05f0d8b158e3e90cf175f8e9abf577d0308eeaa5a2a71a
- SSDEEP
  
  6144:+0YjywDhq1doBLbii5bkgVuN+xSKV7Wkrsf7LsOSfXVB8KC9bV:+0AywDhwdiXikbkgaISKVJXv8z9h
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2