80229a5bcefda8aa306c6017fc0ec57f7498a74dd57ee8ad8072ded5439bf616 | Triage

Sharing

General

Target

80229a5bcefda8aa306c6017fc0ec57f7498a74dd57ee8ad8072ded5439bf616
Size

216KB
Sample

221123-na2lesgc58
MD5

2cf5d730150edb2f008fa2c5d13b13c6
SHA1

f98f4700c9f1ae8d406eb8977861613ed4795efe
SHA256

80229a5bcefda8aa306c6017fc0ec57f7498a74dd57ee8ad8072ded5439bf616
SHA512

d4b88ee52d745e4703da0e751c135af052e9b646211d7e7d64406dc6692ca0293a28be155820081905c81bff6de37e20ae917551541fdac6b184ec97051ba56a
SSDEEP

6144:qw8bgKZh/N1tJsGXwakvYdnIsMl+LMabMbPhPn2:qw80KZh/N1tJ2addnIN+o/hP2

Score

8^/10

Malware Config

Targets

- Target
  
  80229a5bcefda8aa306c6017fc0ec57f7498a74dd57ee8ad8072ded5439bf616
- Size
  
  216KB
- MD5
  
  2cf5d730150edb2f008fa2c5d13b13c6
- SHA1
  
  f98f4700c9f1ae8d406eb8977861613ed4795efe
- SHA256
  
  80229a5bcefda8aa306c6017fc0ec57f7498a74dd57ee8ad8072ded5439bf616
- SHA512
  
  d4b88ee52d745e4703da0e751c135af052e9b646211d7e7d64406dc6692ca0293a28be155820081905c81bff6de37e20ae917551541fdac6b184ec97051ba56a
- SSDEEP
  
  6144:qw8bgKZh/N1tJsGXwakvYdnIsMl+LMabMbPhPn2:qw80KZh/N1tJ2addnIN+o/hP2
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2