9d348db48f08b45bd53cd358ca6477f92ca8742feae8fedd914171a6f1c82e17 | Triage

Sharing

General

Target

9d348db48f08b45bd53cd358ca6477f92ca8742feae8fedd914171a6f1c82e17
Size

599KB
Sample

221123-zw52hsea29
MD5

4f4b7526252b7b78dc29e3bcf0f48c50
SHA1

b6c68f1a1671401e0e3fcb3198f408feee12f961
SHA256

9d348db48f08b45bd53cd358ca6477f92ca8742feae8fedd914171a6f1c82e17
SHA512

91c4c137cc606ea1b907f56bca6dfb4f49ca0743da58fa73f2814d21ffb51de20c475eb90cbe523fe3bb2ebed9947dd113118ec8b43c1207a9cbee716728a4fa
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  9d348db48f08b45bd53cd358ca6477f92ca8742feae8fedd914171a6f1c82e17
- Size
  
  599KB
- MD5
  
  4f4b7526252b7b78dc29e3bcf0f48c50
- SHA1
  
  b6c68f1a1671401e0e3fcb3198f408feee12f961
- SHA256
  
  9d348db48f08b45bd53cd358ca6477f92ca8742feae8fedd914171a6f1c82e17
- SHA512
  
  91c4c137cc606ea1b907f56bca6dfb4f49ca0743da58fa73f2814d21ffb51de20c475eb90cbe523fe3bb2ebed9947dd113118ec8b43c1207a9cbee716728a4fa
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2