fd0fba3c80c32d2f0d13cae68be2f4a3d7601766adec650fac26d903e9fd934e | Triage

Sharing

General

Target

fd0fba3c80c32d2f0d13cae68be2f4a3d7601766adec650fac26d903e9fd934e
Size

60KB
Sample

221123-zpkf8sge2z
MD5

44486b9292d58b348be382e9a021612e
SHA1

5a48e99312611933811810aa740592e3f4f69b97
SHA256

fd0fba3c80c32d2f0d13cae68be2f4a3d7601766adec650fac26d903e9fd934e
SHA512

43f0c8cf48be75bfa10f9186238ba18f6afa1b11037ede0e4c11705ae3e19b7cf991471f9b82f75c9c934935d45b57994f6d1e6729166ec1ea9a3a5697a28d02
SSDEEP

1536:ejuJw3T4JoBjYDxkxblBa18OC0lqMRxgULh4H:ejuJJJiukT8sIquBLO

Score

8^/10

Malware Config

Targets

- Target
  
  fd0fba3c80c32d2f0d13cae68be2f4a3d7601766adec650fac26d903e9fd934e
- Size
  
  60KB
- MD5
  
  44486b9292d58b348be382e9a021612e
- SHA1
  
  5a48e99312611933811810aa740592e3f4f69b97
- SHA256
  
  fd0fba3c80c32d2f0d13cae68be2f4a3d7601766adec650fac26d903e9fd934e
- SHA512
  
  43f0c8cf48be75bfa10f9186238ba18f6afa1b11037ede0e4c11705ae3e19b7cf991471f9b82f75c9c934935d45b57994f6d1e6729166ec1ea9a3a5697a28d02
- SSDEEP
  
  1536:ejuJw3T4JoBjYDxkxblBa18OC0lqMRxgULh4H:ejuJJJiukT8sIquBLO
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2