90f257e78a19be18d0c9b3304d6aa574eb9e5a510845ee7a49804025d0f1f4c5 | Triage

Sharing

General

Target

90f257e78a19be18d0c9b3304d6aa574eb9e5a510845ee7a49804025d0f1f4c5
Size

308KB
Sample

221130-3s1t6sfd94
MD5

330f7d5d0d880f8129d593c53b20a190
SHA1

cb45631c7551a39c98ce085027a86761b1a5d73d
SHA256

90f257e78a19be18d0c9b3304d6aa574eb9e5a510845ee7a49804025d0f1f4c5
SHA512

4bb9b3eeb68f8d44e876b1c448d86052a3c698389c5f93c8a65b315da0e6b7a4d26e85794ec69822d6c237cd23fc66dda9d2df9e3210bde7828695763143a8b2
SSDEEP

6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+l:vHW138/iXWlK885rKlGSekcj66co

Score

8^/10

Malware Config

Targets

- Target
  
  90f257e78a19be18d0c9b3304d6aa574eb9e5a510845ee7a49804025d0f1f4c5
- Size
  
  308KB
- MD5
  
  330f7d5d0d880f8129d593c53b20a190
- SHA1
  
  cb45631c7551a39c98ce085027a86761b1a5d73d
- SHA256
  
  90f257e78a19be18d0c9b3304d6aa574eb9e5a510845ee7a49804025d0f1f4c5
- SHA512
  
  4bb9b3eeb68f8d44e876b1c448d86052a3c698389c5f93c8a65b315da0e6b7a4d26e85794ec69822d6c237cd23fc66dda9d2df9e3210bde7828695763143a8b2
- SSDEEP
  
  6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+l:vHW138/iXWlK885rKlGSekcj66co
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2