79e08220e55446b0c5bcc49a5ea07a96d6e4cc5de3822d9c5350e55447aa30a6 | Triage

Sharing

General

Target

79e08220e55446b0c5bcc49a5ea07a96d6e4cc5de3822d9c5350e55447aa30a6
Size

20KB
Sample

221125-pqjk8agf25
MD5

787e18f089248caeb89d402668125743
SHA1

379a98b9de68ae6e58f131a83d8a21e2863ce5bf
SHA256

79e08220e55446b0c5bcc49a5ea07a96d6e4cc5de3822d9c5350e55447aa30a6
SHA512

2cd061ea2272533ba035bc6251515dd9ef922a1a08fa346be8891efbd52855bf400598361f953c2cee35d8f0980139d111ff3a48c63193bea181e8bea64722d0
SSDEEP

192:Ch6L/HuSm0RAMyM+i1oynlEwwwyYmbypar8ws/:CUHuSmcAMyMv1fSgmby68ws

Score

8^/10

Malware Config

Targets

- Target
  
  79e08220e55446b0c5bcc49a5ea07a96d6e4cc5de3822d9c5350e55447aa30a6
- Size
  
  20KB
- MD5
  
  787e18f089248caeb89d402668125743
- SHA1
  
  379a98b9de68ae6e58f131a83d8a21e2863ce5bf
- SHA256
  
  79e08220e55446b0c5bcc49a5ea07a96d6e4cc5de3822d9c5350e55447aa30a6
- SHA512
  
  2cd061ea2272533ba035bc6251515dd9ef922a1a08fa346be8891efbd52855bf400598361f953c2cee35d8f0980139d111ff3a48c63193bea181e8bea64722d0
- SSDEEP
  
  192:Ch6L/HuSm0RAMyM+i1oynlEwwwyYmbypar8ws/:CUHuSmcAMyMv1fSgmby68ws
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2