f4ab55313232fb2d4d6e759cf92debaad1ba28680a15a19b5e2c107c95231819 | Triage

Sharing

General

Target

f4ab55313232fb2d4d6e759cf92debaad1ba28680a15a19b5e2c107c95231819
Size

654KB
Sample

221123-zwkqksdh86
MD5

4883bedcbb02153e79a9e945dc5ffd20
SHA1

0e4b55efaeb65e3e1d93f4c38285e5638f5eea66
SHA256

f4ab55313232fb2d4d6e759cf92debaad1ba28680a15a19b5e2c107c95231819
SHA512

e21eb4428f29105548d9b0c911b1c0d835544261bf27b10dfa0da0a4d7743c744afe6c895c96965f56792ec345cab67e5ddaa1604721147ed1bcf2eb614f9151
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  f4ab55313232fb2d4d6e759cf92debaad1ba28680a15a19b5e2c107c95231819
- Size
  
  654KB
- MD5
  
  4883bedcbb02153e79a9e945dc5ffd20
- SHA1
  
  0e4b55efaeb65e3e1d93f4c38285e5638f5eea66
- SHA256
  
  f4ab55313232fb2d4d6e759cf92debaad1ba28680a15a19b5e2c107c95231819
- SHA512
  
  e21eb4428f29105548d9b0c911b1c0d835544261bf27b10dfa0da0a4d7743c744afe6c895c96965f56792ec345cab67e5ddaa1604721147ed1bcf2eb614f9151
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2