3f67e2ca1cffb27cd75e9567907f68d17730eb469c8cdff4473883fa58cded4f | Triage

Sharing

General

Target

3f67e2ca1cffb27cd75e9567907f68d17730eb469c8cdff4473883fa58cded4f
Size

545KB
Sample

221123-l27weagc4z
MD5

b8db78f37e022651b0dd36077d131028
SHA1

91ba41b7fbf328865e10c9bf23372092ebdb9cd3
SHA256

3f67e2ca1cffb27cd75e9567907f68d17730eb469c8cdff4473883fa58cded4f
SHA512

15bf3ba2e0f61faaabb23083b90b8260ceed1f50b9c1b60c3a9fc8bc1634392c827a777ba2a2ac35c07f8b0d433620681ee3c71123ffcde4536fc2775c02b4fa
SSDEEP

12288:ipU6okHN7TDkgJqL3/7HgGslIm/eUVvGLHa+a00xiXc5XAaJ:oUpkJTlqL3/7AGslI4JGb4YgJ

Score

8^/10

Malware Config

Targets

- Target
  
  3f67e2ca1cffb27cd75e9567907f68d17730eb469c8cdff4473883fa58cded4f
- Size
  
  545KB
- MD5
  
  b8db78f37e022651b0dd36077d131028
- SHA1
  
  91ba41b7fbf328865e10c9bf23372092ebdb9cd3
- SHA256
  
  3f67e2ca1cffb27cd75e9567907f68d17730eb469c8cdff4473883fa58cded4f
- SHA512
  
  15bf3ba2e0f61faaabb23083b90b8260ceed1f50b9c1b60c3a9fc8bc1634392c827a777ba2a2ac35c07f8b0d433620681ee3c71123ffcde4536fc2775c02b4fa
- SSDEEP
  
  12288:ipU6okHN7TDkgJqL3/7HgGslIm/eUVvGLHa+a00xiXc5XAaJ:oUpkJTlqL3/7AGslI4JGb4YgJ
Score

8^/10
- Blocklisted process makes network request
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2