81e695f628436a4850bec46b3f90906433a0d11ae163f298f48fae788362d29a | Triage

Sharing

General

Target

81e695f628436a4850bec46b3f90906433a0d11ae163f298f48fae788362d29a
Size

18KB
Sample

221123-mqkr6shh8z
MD5

840b3b6a714f7330706f0c19f99d5eb8
SHA1

6bd97b730e176560752902a2cfe968db6c7860e3
SHA256

81e695f628436a4850bec46b3f90906433a0d11ae163f298f48fae788362d29a
SHA512

ad2816a99f227ca6e5e3f9e2c117f2a5311d98e635619d4d163d3db9369ebd511167715685588b6cde85a5176216e317d947f3ddf94450195ba7cbace53cfd17
SSDEEP

192:K790pylszn3MPFjuOZrCZ047a1oyn361miLMgepar8Vd/:s2pzn4sOZrCv7a18wiLMge68Vd

Score

8^/10

Malware Config

Targets

- Target
  
  81e695f628436a4850bec46b3f90906433a0d11ae163f298f48fae788362d29a
- Size
  
  18KB
- MD5
  
  840b3b6a714f7330706f0c19f99d5eb8
- SHA1
  
  6bd97b730e176560752902a2cfe968db6c7860e3
- SHA256
  
  81e695f628436a4850bec46b3f90906433a0d11ae163f298f48fae788362d29a
- SHA512
  
  ad2816a99f227ca6e5e3f9e2c117f2a5311d98e635619d4d163d3db9369ebd511167715685588b6cde85a5176216e317d947f3ddf94450195ba7cbace53cfd17
- SSDEEP
  
  192:K790pylszn3MPFjuOZrCZ047a1oyn361miLMgepar8Vd/:s2pzn4sOZrCv7a18wiLMge68Vd
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2