4ff1452566fc312f9630c1fa2a2250a665e1ec3602b7168e4240306b114eae84 | Triage

Sharing

General

Target

4ff1452566fc312f9630c1fa2a2250a665e1ec3602b7168e4240306b114eae84
Size

22KB
Sample

221123-l2nsjagc2x
MD5

a9c2bc397fda3ff077b04d5b7ac6706c
SHA1

ff33c3ffc150f9a23dfc7ddac2dd8801b1e29f08
SHA256

4ff1452566fc312f9630c1fa2a2250a665e1ec3602b7168e4240306b114eae84
SHA512

007419858c4238e8a89b4bf70df9ec9fd36fe43c22de159fcecf7ea2aef9248da816e15342bb57901fe49213a86bb4a010c7b60ea144411581df06269767a441
SSDEEP

192:/YXEoQewsETX0YMd1oyn3keo+4E5rMdPqaDdDWLkqQl:/QEgwsEoVd1yS5rMhXh6Ql

Score

8^/10

Malware Config

Targets

- Target
  
  4ff1452566fc312f9630c1fa2a2250a665e1ec3602b7168e4240306b114eae84
- Size
  
  22KB
- MD5
  
  a9c2bc397fda3ff077b04d5b7ac6706c
- SHA1
  
  ff33c3ffc150f9a23dfc7ddac2dd8801b1e29f08
- SHA256
  
  4ff1452566fc312f9630c1fa2a2250a665e1ec3602b7168e4240306b114eae84
- SHA512
  
  007419858c4238e8a89b4bf70df9ec9fd36fe43c22de159fcecf7ea2aef9248da816e15342bb57901fe49213a86bb4a010c7b60ea144411581df06269767a441
- SSDEEP
  
  192:/YXEoQewsETX0YMd1oyn3keo+4E5rMdPqaDdDWLkqQl:/QEgwsEoVd1yS5rMhXh6Ql
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2