79a425882aacd28acb86b45017a57152049a4af1e3b30b7aff7e6f8eff0e8c56 | Triage

Sharing

General

Target

79a425882aacd28acb86b45017a57152049a4af1e3b30b7aff7e6f8eff0e8c56
Size

172KB
Sample

221123-lr1z4sfe6y
MD5

60a7a8b1c78cb2ed4becd00a6456dbc8
SHA1

09bd14a2853b5f5a8babbdd552a4953c43c2f483
SHA256

79a425882aacd28acb86b45017a57152049a4af1e3b30b7aff7e6f8eff0e8c56
SHA512

09b24a8ceb41f88f790e3e10398f40b86d4def12b951e9beac6022f14fdc6723222152225b72e2d0823a4c0f7961749aba5510253382b67969f0ccb50219dba6
SSDEEP

3072:iJ0A2KvUXh9O5P908zsStvqeSwCKx83lUICxsqcAeSQ:i0A2auu10usSJbuKxAlicbS

Score

8^/10

Malware Config

Targets

- Target
  
  79a425882aacd28acb86b45017a57152049a4af1e3b30b7aff7e6f8eff0e8c56
- Size
  
  172KB
- MD5
  
  60a7a8b1c78cb2ed4becd00a6456dbc8
- SHA1
  
  09bd14a2853b5f5a8babbdd552a4953c43c2f483
- SHA256
  
  79a425882aacd28acb86b45017a57152049a4af1e3b30b7aff7e6f8eff0e8c56
- SHA512
  
  09b24a8ceb41f88f790e3e10398f40b86d4def12b951e9beac6022f14fdc6723222152225b72e2d0823a4c0f7961749aba5510253382b67969f0ccb50219dba6
- SSDEEP
  
  3072:iJ0A2KvUXh9O5P908zsStvqeSwCKx83lUICxsqcAeSQ:i0A2auu10usSJbuKxAlicbS
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2