699ffe932b40015c74f2d232a1440bfd29e68aea7d079204239030fc112faefe | Triage

Sharing

General

Target

699ffe932b40015c74f2d232a1440bfd29e68aea7d079204239030fc112faefe
Size

1.8MB
Sample

221123-ss2rcscb64
MD5

a6638ff20c2b4f88a62063835c6d6d83
SHA1

de208d6c257e6d83ee1e39a969032b38ac441b41
SHA256

699ffe932b40015c74f2d232a1440bfd29e68aea7d079204239030fc112faefe
SHA512

964791710fde4cc6f641414bb480191e6e6d149fa458536c6651f7e963c5f63202fd7e0a6e09dd8893db1cda3e2c3bdd588f8affdeb20dc60431fe6076d44dce
SSDEEP

24576:rconAINPy/C1G8XWPxbXhLQJdNX3ztMSOQal2mmsT8/rIk8OWnjtyYMyVQwfaVqa:bRxU5pTJOX3vCQdDIk8OWjATwz/8r

Score

7^/10

Malware Config

Targets

- Target
  
  699ffe932b40015c74f2d232a1440bfd29e68aea7d079204239030fc112faefe
- Size
  
  1.8MB
- MD5
  
  a6638ff20c2b4f88a62063835c6d6d83
- SHA1
  
  de208d6c257e6d83ee1e39a969032b38ac441b41
- SHA256
  
  699ffe932b40015c74f2d232a1440bfd29e68aea7d079204239030fc112faefe
- SHA512
  
  964791710fde4cc6f641414bb480191e6e6d149fa458536c6651f7e963c5f63202fd7e0a6e09dd8893db1cda3e2c3bdd588f8affdeb20dc60431fe6076d44dce
- SSDEEP
  
  24576:rconAINPy/C1G8XWPxbXhLQJdNX3ztMSOQal2mmsT8/rIk8OWnjtyYMyVQwfaVqa:bRxU5pTJOX3vCQdDIk8OWjATwz/8r
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1