d6d523825c7f46d3c9dbd3575bd45310d46c56800501a3d817e1b6193cd5db2f | Triage

Sharing

General

Target

d6d523825c7f46d3c9dbd3575bd45310d46c56800501a3d817e1b6193cd5db2f
Size

854KB
Sample

221203-3nt6tsff95
MD5

730a10ab488383d989064095ac488eea
SHA1

8085d8057f03cf0e49cad9abd681d5f83e01ba3f
SHA256

d6d523825c7f46d3c9dbd3575bd45310d46c56800501a3d817e1b6193cd5db2f
SHA512

810ddf045266be1a21469026686f72a92fcd2f8169ad26b3bff11f66575a3c44752876bf0c85689067debe464686be5ef7038497f27594a28b4e8dd78bc5d4fa
SSDEEP

24576:FeLVA0wbG+SXyrjVs0aL+fV4RPNUh2rREr1AVQIY:+VpTyjOPNUh2FEr1YPY

Score

8^/10

Malware Config

Targets

- Target
  
  d6d523825c7f46d3c9dbd3575bd45310d46c56800501a3d817e1b6193cd5db2f
- Size
  
  854KB
- MD5
  
  730a10ab488383d989064095ac488eea
- SHA1
  
  8085d8057f03cf0e49cad9abd681d5f83e01ba3f
- SHA256
  
  d6d523825c7f46d3c9dbd3575bd45310d46c56800501a3d817e1b6193cd5db2f
- SHA512
  
  810ddf045266be1a21469026686f72a92fcd2f8169ad26b3bff11f66575a3c44752876bf0c85689067debe464686be5ef7038497f27594a28b4e8dd78bc5d4fa
- SSDEEP
  
  24576:FeLVA0wbG+SXyrjVs0aL+fV4RPNUh2rREr1AVQIY:+VpTyjOPNUh2FEr1YPY
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2