a008fe4f80ed3aa2fea192c8056b2a9c84f43c1d43c13ac5e569c3ec74c4f0c0 | Triage

Sharing

General

Target

a008fe4f80ed3aa2fea192c8056b2a9c84f43c1d43c13ac5e569c3ec74c4f0c0
Size

41KB
Sample

221202-1y6lhacf3x
MD5

ec33976b3011688c413a11e447cc8cc8
SHA1

aafec04e967cd4fac2d51252d56c1d9e3aca950b
SHA256

a008fe4f80ed3aa2fea192c8056b2a9c84f43c1d43c13ac5e569c3ec74c4f0c0
SHA512

c5f2b23a7c590d940de67620e38fbe21a4030e8ae4e560601dc0405465832b27b89f34c4ffe02965b7d42fddbd25331ef8b5ef113a4279d2a657c7b3f00895e6
SSDEEP

768:QIBar1ZIZYnfI9opm6AIHIjaI7g9mVmUn2oNE/W5dRV8:pW1ZIZqI9opm6AIHIjzmUXNzd

Score

8^/10

Malware Config

Targets

- Target
  
  a008fe4f80ed3aa2fea192c8056b2a9c84f43c1d43c13ac5e569c3ec74c4f0c0
- Size
  
  41KB
- MD5
  
  ec33976b3011688c413a11e447cc8cc8
- SHA1
  
  aafec04e967cd4fac2d51252d56c1d9e3aca950b
- SHA256
  
  a008fe4f80ed3aa2fea192c8056b2a9c84f43c1d43c13ac5e569c3ec74c4f0c0
- SHA512
  
  c5f2b23a7c590d940de67620e38fbe21a4030e8ae4e560601dc0405465832b27b89f34c4ffe02965b7d42fddbd25331ef8b5ef113a4279d2a657c7b3f00895e6
- SSDEEP
  
  768:QIBar1ZIZYnfI9opm6AIHIjaI7g9mVmUn2oNE/W5dRV8:pW1ZIZqI9opm6AIHIjzmUXNzd
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2