13da529a139ce07efa4e64771b449791021e071c4b23085e5a2d5c510c9ea825 | Triage

Sharing

General

Target

13da529a139ce07efa4e64771b449791021e071c4b23085e5a2d5c510c9ea825
Size

793KB
Sample

221123-k2cvlahh88
MD5

6f9e437cd3114aef8abe2e3c4e09fcc7
SHA1

6d6fbae415b504ff30d3f6bee49a30a497eb1919
SHA256

13da529a139ce07efa4e64771b449791021e071c4b23085e5a2d5c510c9ea825
SHA512

a2f2c12949e44b7e193a609b406325eec75505a76e350923f3a35b5da3310f99e10392c1daa801a22a2d34973fff6c076cb1668643cdf660a333e1a63ae79bac
SSDEEP

24576:IFszWS5byefnp9pgp9EQjAyEBVvEqABf/+8aBqUybDsBK:IwreNwBVMvfEjO0K

Score

8^/10

Malware Config

Targets

- Target
  
  13da529a139ce07efa4e64771b449791021e071c4b23085e5a2d5c510c9ea825
- Size
  
  793KB
- MD5
  
  6f9e437cd3114aef8abe2e3c4e09fcc7
- SHA1
  
  6d6fbae415b504ff30d3f6bee49a30a497eb1919
- SHA256
  
  13da529a139ce07efa4e64771b449791021e071c4b23085e5a2d5c510c9ea825
- SHA512
  
  a2f2c12949e44b7e193a609b406325eec75505a76e350923f3a35b5da3310f99e10392c1daa801a22a2d34973fff6c076cb1668643cdf660a333e1a63ae79bac
- SSDEEP
  
  24576:IFszWS5byefnp9pgp9EQjAyEBVvEqABf/+8aBqUybDsBK:IwreNwBVMvfEjO0K
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2