29f5b14e969311a2b17e53f72105316671680837cec9f53c7520fe0775807422 | Triage

Sharing

General

Target

29f5b14e969311a2b17e53f72105316671680837cec9f53c7520fe0775807422
Size

18KB
Sample

221123-mqma1aeg27
MD5

9de1c02cb8f6203bcf3b6f79962adb7b
SHA1

79b9d852150ce8504cd9e1a0a8fbab8f85c06903
SHA256

29f5b14e969311a2b17e53f72105316671680837cec9f53c7520fe0775807422
SHA512

c3663475e1f25351b4ec6587e85549da74a72ee1d07d286c0d0d8b368a42f8a807995e5e31e34397e860c2712f0ff1ffd848d523313d744e10422ead18d8285b
SSDEEP

192:K790pylszn3MPFjuOZrCZ047a1oyn361miLMgepar8Vd/d:s2pzn4sOZrCv7a18wiLMge68VdV

Score

8^/10

Malware Config

Targets

- Target
  
  29f5b14e969311a2b17e53f72105316671680837cec9f53c7520fe0775807422
- Size
  
  18KB
- MD5
  
  9de1c02cb8f6203bcf3b6f79962adb7b
- SHA1
  
  79b9d852150ce8504cd9e1a0a8fbab8f85c06903
- SHA256
  
  29f5b14e969311a2b17e53f72105316671680837cec9f53c7520fe0775807422
- SHA512
  
  c3663475e1f25351b4ec6587e85549da74a72ee1d07d286c0d0d8b368a42f8a807995e5e31e34397e860c2712f0ff1ffd848d523313d744e10422ead18d8285b
- SSDEEP
  
  192:K790pylszn3MPFjuOZrCZ047a1oyn361miLMgepar8Vd/d:s2pzn4sOZrCv7a18wiLMge68VdV
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2