de49913976e5de38c57ffabbdfcbb4a5c78f0f8142d8bc7a685dacaddcdfb067 | Triage

Sharing

General

Target

de49913976e5de38c57ffabbdfcbb4a5c78f0f8142d8bc7a685dacaddcdfb067
Size

100KB
Sample

221123-zrenrsdf23
MD5

4b5a55a7313ee1aef50e8e69b57d24a3
SHA1

7918d7d38f7736abb7920ea41e1bb2ed27d2814f
SHA256

de49913976e5de38c57ffabbdfcbb4a5c78f0f8142d8bc7a685dacaddcdfb067
SHA512

8cbd139cec215c8c263b45be969f61296259fd8f2476a28389cc6b53585ae7d4cfd121525bebd4b5a1f7f590495e54cc98d0aaa37bbafedd39c79b05624c6b62
SSDEEP

1536:qPqyxhSQPxv17l3OPIrel9pEH4XUaWRJpAgU:qPqyxDPxaPIriq/pAgU

Score

8^/10

Malware Config

Targets

- Target
  
  de49913976e5de38c57ffabbdfcbb4a5c78f0f8142d8bc7a685dacaddcdfb067
- Size
  
  100KB
- MD5
  
  4b5a55a7313ee1aef50e8e69b57d24a3
- SHA1
  
  7918d7d38f7736abb7920ea41e1bb2ed27d2814f
- SHA256
  
  de49913976e5de38c57ffabbdfcbb4a5c78f0f8142d8bc7a685dacaddcdfb067
- SHA512
  
  8cbd139cec215c8c263b45be969f61296259fd8f2476a28389cc6b53585ae7d4cfd121525bebd4b5a1f7f590495e54cc98d0aaa37bbafedd39c79b05624c6b62
- SSDEEP
  
  1536:qPqyxhSQPxv17l3OPIrel9pEH4XUaWRJpAgU:qPqyxDPxaPIriq/pAgU
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2