a36531a371a6e7d56793d6e79d4e92bf5b2312691e0cc602495bac03f0c46d59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a36531a371a6e7d56793d6e79d4e92bf5b2312691e0cc602495bac03f0c46d59
Size

245KB
Sample

221201-ac55qsbh8s
MD5

a3becd0d67e4de477bf1a0ba9600e5f4
SHA1

a06dc2589c61b02de99ec5123a44031ad67a06ee
SHA256

a36531a371a6e7d56793d6e79d4e92bf5b2312691e0cc602495bac03f0c46d59
SHA512

bb44001293736c57624eed9a80e7d65f98a105639733836467dd82d7fec90f706090b8b631da33b58149ab45c1272cc69d3a6dca9ae87e6f8daae327c5a63a39
SSDEEP

6144:MvbP36OAaAQal+Dmn3cpSE6cr5FnBkU5ZR2:gr3v/ralsG3C66qUzR2

Score

7^/10

Malware Config

Targets

- Target
  
  a36531a371a6e7d56793d6e79d4e92bf5b2312691e0cc602495bac03f0c46d59
- Size
  
  245KB
- MD5
  
  a3becd0d67e4de477bf1a0ba9600e5f4
- SHA1
  
  a06dc2589c61b02de99ec5123a44031ad67a06ee
- SHA256
  
  a36531a371a6e7d56793d6e79d4e92bf5b2312691e0cc602495bac03f0c46d59
- SHA512
  
  bb44001293736c57624eed9a80e7d65f98a105639733836467dd82d7fec90f706090b8b631da33b58149ab45c1272cc69d3a6dca9ae87e6f8daae327c5a63a39
- SSDEEP
  
  6144:MvbP36OAaAQal+Dmn3cpSE6cr5FnBkU5ZR2:gr3v/ralsG3C66qUzR2
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2