b32051f148d14ec759f5ff05e8baad7c9e97e3ee73aaade3b607496de37709bb | Triage

Sharing

General

Target

b32051f148d14ec759f5ff05e8baad7c9e97e3ee73aaade3b607496de37709bb
Size

3.4MB
Sample

221127-nfezlsgd6z
MD5

21f420cf12acf484d126f5b153131e7a
SHA1

46979b39b5b3ec52d3a9d582cf74a9c96e8cc26e
SHA256

b32051f148d14ec759f5ff05e8baad7c9e97e3ee73aaade3b607496de37709bb
SHA512

a058ce6bf174596a036a20f961c19b307ecf08dd6aeae4b85aa10aa6e1547236673e239510e3279f6851e31aa3d2a68ccf308231e6a31b679c93e41b3a8b270b
SSDEEP

98304:c3BRF/1E74wVxlc5H6rtojimBHeT0yzvmt2gupE2r:c6GOmsT0yji2guz

Score

8^/10

Malware Config

Targets

- Target
  
  b32051f148d14ec759f5ff05e8baad7c9e97e3ee73aaade3b607496de37709bb
- Size
  
  3.4MB
- MD5
  
  21f420cf12acf484d126f5b153131e7a
- SHA1
  
  46979b39b5b3ec52d3a9d582cf74a9c96e8cc26e
- SHA256
  
  b32051f148d14ec759f5ff05e8baad7c9e97e3ee73aaade3b607496de37709bb
- SHA512
  
  a058ce6bf174596a036a20f961c19b307ecf08dd6aeae4b85aa10aa6e1547236673e239510e3279f6851e31aa3d2a68ccf308231e6a31b679c93e41b3a8b270b
- SSDEEP
  
  98304:c3BRF/1E74wVxlc5H6rtojimBHeT0yzvmt2gupE2r:c6GOmsT0yji2guz
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2