344a8716eea57b5fdcff1622568b124016acf986f9455804d82e72ef1bfe7880 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

344a8716eea57b5fdcff1622568b124016acf986f9455804d82e72ef1bfe7880
Size

309KB
Sample

221201-fvwxnsbg5v
MD5

a07604b5a9201fe428fcf52fc927cfc2
SHA1

8685e486974a473d8944f52fcd8a351668f6b12d
SHA256

344a8716eea57b5fdcff1622568b124016acf986f9455804d82e72ef1bfe7880
SHA512

6b7d057cac0ba22f0056b535323368ae5106e16dce125dfd5570fbdbce51d940d0493ce98b93e98a89dac43faeabd69adee8ad2db04af7dfc396483936037f38
SSDEEP

6144:BME1nmg1tDbJ5621YNgju8BREtHlVS9P3WgRM0va0d+SjHnNzKpZ:ugnJbj7EtHlVuP3bM83jHN+pZ

Score

8^/10

Malware Config

Targets

- Target
  
  344a8716eea57b5fdcff1622568b124016acf986f9455804d82e72ef1bfe7880
- Size
  
  309KB
- MD5
  
  a07604b5a9201fe428fcf52fc927cfc2
- SHA1
  
  8685e486974a473d8944f52fcd8a351668f6b12d
- SHA256
  
  344a8716eea57b5fdcff1622568b124016acf986f9455804d82e72ef1bfe7880
- SHA512
  
  6b7d057cac0ba22f0056b535323368ae5106e16dce125dfd5570fbdbce51d940d0493ce98b93e98a89dac43faeabd69adee8ad2db04af7dfc396483936037f38
- SSDEEP
  
  6144:BME1nmg1tDbJ5621YNgju8BREtHlVS9P3WgRM0va0d+SjHnNzKpZ:ugnJbj7EtHlVuP3bM83jHN+pZ
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2