db8bf91fffd9b4011a38734abc738259c11d400e30df5c81d747b4182811c291 | Triage

Sharing

General

Target

db8bf91fffd9b4011a38734abc738259c11d400e30df5c81d747b4182811c291
Size

28KB
Sample

221121-sje61aeh52
MD5

20670c2b09a0de2d52dce0bb28470e74
SHA1

6d750b3f4cac35159cbd2290c7737d930d588dc9
SHA256

db8bf91fffd9b4011a38734abc738259c11d400e30df5c81d747b4182811c291
SHA512

0e787b6075598c5dc28d3257773ecf265f151f8a13c9f4fa398ce88c1ef5af6690392f2ae63facca3be777a01ab8239a9f61b20711d0bcd85678c04153251f5a
SSDEEP

384:/TRXk1KnP2+DbC+rC+EA37bDQKXQFlDQKXbDFlDoAHdPscGtDr4Jf8:/x+KuzDqvDQXQu3oAHmcisB

Score

8^/10

Malware Config

Targets

- Target
  
  db8bf91fffd9b4011a38734abc738259c11d400e30df5c81d747b4182811c291
- Size
  
  28KB
- MD5
  
  20670c2b09a0de2d52dce0bb28470e74
- SHA1
  
  6d750b3f4cac35159cbd2290c7737d930d588dc9
- SHA256
  
  db8bf91fffd9b4011a38734abc738259c11d400e30df5c81d747b4182811c291
- SHA512
  
  0e787b6075598c5dc28d3257773ecf265f151f8a13c9f4fa398ce88c1ef5af6690392f2ae63facca3be777a01ab8239a9f61b20711d0bcd85678c04153251f5a
- SSDEEP
  
  384:/TRXk1KnP2+DbC+rC+EA37bDQKXQFlDQKXbDFlDoAHdPscGtDr4Jf8:/x+KuzDqvDQXQu3oAHmcisB
Score

8^/10
- Drops file in Drivers directory
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2