21c506e618fe07f4b369d1401a2ac5294408b1efbb1dae44c5cbafc6ea27e7da | Triage

Sharing

General

Target

21c506e618fe07f4b369d1401a2ac5294408b1efbb1dae44c5cbafc6ea27e7da
Size

600KB
Sample

221123-zx92vsea76
MD5

46007898edda62aa7e0fc39c57e5fe90
SHA1

7efc2f85849c9b0f0912d22a4b6a7cd48ef0ddc1
SHA256

21c506e618fe07f4b369d1401a2ac5294408b1efbb1dae44c5cbafc6ea27e7da
SHA512

2d8f84a945b5ca7ff57577709156764b80ee9988f85f77cafbd130643935b729361d60434f8ebcd7d53655bec5c3a09fcaf5c9cd0e89fd4dda47cec0bee82e56
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  21c506e618fe07f4b369d1401a2ac5294408b1efbb1dae44c5cbafc6ea27e7da
- Size
  
  600KB
- MD5
  
  46007898edda62aa7e0fc39c57e5fe90
- SHA1
  
  7efc2f85849c9b0f0912d22a4b6a7cd48ef0ddc1
- SHA256
  
  21c506e618fe07f4b369d1401a2ac5294408b1efbb1dae44c5cbafc6ea27e7da
- SHA512
  
  2d8f84a945b5ca7ff57577709156764b80ee9988f85f77cafbd130643935b729361d60434f8ebcd7d53655bec5c3a09fcaf5c9cd0e89fd4dda47cec0bee82e56
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2