836c6fbb9069d39a255c7639ce5f330b7f773662f24235bbf2327f8c1db3ea88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

836c6fbb9069d39a255c7639ce5f330b7f773662f24235bbf2327f8c1db3ea88
Size

724KB
Sample

221202-3ycpjaff86
MD5

d55dd31e356cff69373d1de97d7e4570
SHA1

3cf0a8ac48281905044cb452a97a56bf7289c605
SHA256

836c6fbb9069d39a255c7639ce5f330b7f773662f24235bbf2327f8c1db3ea88
SHA512

2a1bb53c67d8b062e5d023e06886cd7ef403f312049ae75b2fdd1eb78537ac6fe165bb82b1c7f27773e8e608ff4b49b679ddfa098445280666f73d948ee1bc03
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  836c6fbb9069d39a255c7639ce5f330b7f773662f24235bbf2327f8c1db3ea88
- Size
  
  724KB
- MD5
  
  d55dd31e356cff69373d1de97d7e4570
- SHA1
  
  3cf0a8ac48281905044cb452a97a56bf7289c605
- SHA256
  
  836c6fbb9069d39a255c7639ce5f330b7f773662f24235bbf2327f8c1db3ea88
- SHA512
  
  2a1bb53c67d8b062e5d023e06886cd7ef403f312049ae75b2fdd1eb78537ac6fe165bb82b1c7f27773e8e608ff4b49b679ddfa098445280666f73d948ee1bc03
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2