805afeed0aee894d45da02b05c8141e94108a08870020ab707b1caeac920ed53 | Triage

Sharing

General

Target

805afeed0aee894d45da02b05c8141e94108a08870020ab707b1caeac920ed53
Size

223KB
Sample

221128-djz4vaad94
MD5

a3515422fca53a59a6920dede7c5fd2c
SHA1

d849d7af07ed678fd5d0e9252569c245b2297292
SHA256

805afeed0aee894d45da02b05c8141e94108a08870020ab707b1caeac920ed53
SHA512

e7f4f5281a00a9355cecf770717c62b0721e37e2f55c092b51d72ccb605fbc4e00158d897928114bddc8ff167989d8c189eaa8325aa90bc35a22f6e0c0dbd840
SSDEEP

6144:HP9lNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNdwNMaFuWMGH:HP9iiaNMGfkHriP8L2

Score

8^/10

Malware Config

Targets

- Target
  
  805afeed0aee894d45da02b05c8141e94108a08870020ab707b1caeac920ed53
- Size
  
  223KB
- MD5
  
  a3515422fca53a59a6920dede7c5fd2c
- SHA1
  
  d849d7af07ed678fd5d0e9252569c245b2297292
- SHA256
  
  805afeed0aee894d45da02b05c8141e94108a08870020ab707b1caeac920ed53
- SHA512
  
  e7f4f5281a00a9355cecf770717c62b0721e37e2f55c092b51d72ccb605fbc4e00158d897928114bddc8ff167989d8c189eaa8325aa90bc35a22f6e0c0dbd840
- SSDEEP
  
  6144:HP9lNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNdwNMaFuWMGH:HP9iiaNMGfkHriP8L2
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2