96befb447a5a953dfcb07acc26d358d2b2511a650c2615408cc6b5c395e291f4 | Triage

Sharing

General

Target

96befb447a5a953dfcb07acc26d358d2b2511a650c2615408cc6b5c395e291f4
Size

669KB
Sample

221123-zw8gmsea35
MD5

529afe0f51eff7bcf18d7d7f890aa530
SHA1

05d4c07e5bbf4a789fe2458b8a3326b3c2c46674
SHA256

96befb447a5a953dfcb07acc26d358d2b2511a650c2615408cc6b5c395e291f4
SHA512

e8e49584d91a465612620f6b199ebd328c89fac6dae4c58fd0015b9200c5f2a0b0ed8d042bd55c22278db0289a6032d468b91fd2760ec964d7911c6f4e84f9a4
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  96befb447a5a953dfcb07acc26d358d2b2511a650c2615408cc6b5c395e291f4
- Size
  
  669KB
- MD5
  
  529afe0f51eff7bcf18d7d7f890aa530
- SHA1
  
  05d4c07e5bbf4a789fe2458b8a3326b3c2c46674
- SHA256
  
  96befb447a5a953dfcb07acc26d358d2b2511a650c2615408cc6b5c395e291f4
- SHA512
  
  e8e49584d91a465612620f6b199ebd328c89fac6dae4c58fd0015b9200c5f2a0b0ed8d042bd55c22278db0289a6032d468b91fd2760ec964d7911c6f4e84f9a4
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2