3d5d369c3705ca7e8130cb5475889e8f57ab80ca1f0483591308a1a43193560d | Triage

Sharing

General

Target

3d5d369c3705ca7e8130cb5475889e8f57ab80ca1f0483591308a1a43193560d
Size

33KB
Sample

221107-qt1jkscahr
MD5

06c648ae85c5e38ba44c878a07bd0bf0
SHA1

d4a001ff0775cbb0aa6a3845e4d9740e759b2e94
SHA256

3d5d369c3705ca7e8130cb5475889e8f57ab80ca1f0483591308a1a43193560d
SHA512

72f5078018c1675c8bf7c75737bef0ef76ba87466a4122593f68c83825c3e9a9a639f67180ccfe77b0ea48cd19cd1bf8be56c63898546255a2986f8f67818049
SSDEEP

384:pAcTAjVwMatOwS58YwWdFeaeohweCvklV4Viq1cZSeOesh7:pZTAa/OZj74SOh7

Score

8^/10

Malware Config

Targets

- Target
  
  3d5d369c3705ca7e8130cb5475889e8f57ab80ca1f0483591308a1a43193560d
- Size
  
  33KB
- MD5
  
  06c648ae85c5e38ba44c878a07bd0bf0
- SHA1
  
  d4a001ff0775cbb0aa6a3845e4d9740e759b2e94
- SHA256
  
  3d5d369c3705ca7e8130cb5475889e8f57ab80ca1f0483591308a1a43193560d
- SHA512
  
  72f5078018c1675c8bf7c75737bef0ef76ba87466a4122593f68c83825c3e9a9a639f67180ccfe77b0ea48cd19cd1bf8be56c63898546255a2986f8f67818049
- SSDEEP
  
  384:pAcTAjVwMatOwS58YwWdFeaeohweCvklV4Viq1cZSeOesh7:pZTAa/OZj74SOh7
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2