6c6cdf00a6ddd211d0649f081d94cabd3ee57b25673a7404816e158ede520bf6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c6cdf00a6ddd211d0649f081d94cabd3ee57b25673a7404816e158ede520bf6
Size

16.3MB
Sample

221127-zvvt6adb6t
MD5

72937885e475f28b4304027c61d20095
SHA1

bfe57699af59a3bfb2ac7fe1e8e007adeffde5d8
SHA256

6c6cdf00a6ddd211d0649f081d94cabd3ee57b25673a7404816e158ede520bf6
SHA512

09a392b94fcf4871d0bcd5222137cb9a55d4d1a6415c0df9256d68e41b8c94785dbb19589ab51108a5d6308a058fb87bdc1058d501bd7739bc6f40221140e64b
SSDEEP

196608:wf89mPaZPDIP2viVDb0joXp6dzFYVXcS1v6VnxJY93Yu7A7ZnKqwMABV2aGxyygt:wDaRITVDbiNdz+6smXY9oH7QqnAggo9i

Score

8^/10

Malware Config

Targets

- Target
  
  6c6cdf00a6ddd211d0649f081d94cabd3ee57b25673a7404816e158ede520bf6
- Size
  
  16.3MB
- MD5
  
  72937885e475f28b4304027c61d20095
- SHA1
  
  bfe57699af59a3bfb2ac7fe1e8e007adeffde5d8
- SHA256
  
  6c6cdf00a6ddd211d0649f081d94cabd3ee57b25673a7404816e158ede520bf6
- SHA512
  
  09a392b94fcf4871d0bcd5222137cb9a55d4d1a6415c0df9256d68e41b8c94785dbb19589ab51108a5d6308a058fb87bdc1058d501bd7739bc6f40221140e64b
- SSDEEP
  
  196608:wf89mPaZPDIP2viVDb0joXp6dzFYVXcS1v6VnxJY93Yu7A7ZnKqwMABV2aGxyygt:wDaRITVDbiNdz+6smXY9oH7QqnAggo9i
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2