ff49b00b01057c6effc71e75ccefcded580ed896a41120a532422200a72be1b4 | Triage

Sharing

General

Target

ff49b00b01057c6effc71e75ccefcded580ed896a41120a532422200a72be1b4
Size

2.4MB
Sample

221123-vvkxqsda2y
MD5

54a7c19c3978126a1120de7b6af5d48c
SHA1

bf8ca5950b9f0ccb64a15a192c718c5e0fab9f5b
SHA256

ff49b00b01057c6effc71e75ccefcded580ed896a41120a532422200a72be1b4
SHA512

28c7ff438a3b02098bb6d85ea4eabd4ce0a678ca933c5f2b7d380ed88e634677f6dbca2c0a9ede366ece329b7809029e339bb50d4444d2ac1877898c3412e1f0
SSDEEP

49152:WxoIUFS2336KoEBCGCdJzjUxnC+EnvAhezw9o+ZZ7hGeJ3TuzcC4:PIUFSbK1C7/zYxCXhzw9o+DMmyzcL

Score

8^/10

Malware Config

Targets

- Target
  
  ff49b00b01057c6effc71e75ccefcded580ed896a41120a532422200a72be1b4
- Size
  
  2.4MB
- MD5
  
  54a7c19c3978126a1120de7b6af5d48c
- SHA1
  
  bf8ca5950b9f0ccb64a15a192c718c5e0fab9f5b
- SHA256
  
  ff49b00b01057c6effc71e75ccefcded580ed896a41120a532422200a72be1b4
- SHA512
  
  28c7ff438a3b02098bb6d85ea4eabd4ce0a678ca933c5f2b7d380ed88e634677f6dbca2c0a9ede366ece329b7809029e339bb50d4444d2ac1877898c3412e1f0
- SSDEEP
  
  49152:WxoIUFS2336KoEBCGCdJzjUxnC+EnvAhezw9o+ZZ7hGeJ3TuzcC4:PIUFSbK1C7/zYxCXhzw9o+DMmyzcL
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2