be53839b74560cf0350ec1249d7c98780c40dca9cdfe129b81c478876cdc4fa3 | Triage

Sharing

General

Target

be53839b74560cf0350ec1249d7c98780c40dca9cdfe129b81c478876cdc4fa3
Size

22KB
Sample

221203-gtm4taed5s
MD5

22fc5f065a9ed29d40db87169186d170
SHA1

6b0d269a01438f83441ba06a3b7eee6f6052eea8
SHA256

be53839b74560cf0350ec1249d7c98780c40dca9cdfe129b81c478876cdc4fa3
SHA512

1c66b31c90b30a05976813e2c5b3af2c4e9f83fbe1c1ac9759bd1eb874b72591a3828cf0e60a644b51f10d459cebe2a920370dce98898233bd759eb85cc4421f
SSDEEP

384:VE5kLIIQaIlI2etwhP7bJTZGOk0+4tdmuQc1PbJv:VEkI+I5eQzbJTZ3fJv

Score

8^/10

Malware Config

Targets

- Target
  
  be53839b74560cf0350ec1249d7c98780c40dca9cdfe129b81c478876cdc4fa3
- Size
  
  22KB
- MD5
  
  22fc5f065a9ed29d40db87169186d170
- SHA1
  
  6b0d269a01438f83441ba06a3b7eee6f6052eea8
- SHA256
  
  be53839b74560cf0350ec1249d7c98780c40dca9cdfe129b81c478876cdc4fa3
- SHA512
  
  1c66b31c90b30a05976813e2c5b3af2c4e9f83fbe1c1ac9759bd1eb874b72591a3828cf0e60a644b51f10d459cebe2a920370dce98898233bd759eb85cc4421f
- SSDEEP
  
  384:VE5kLIIQaIlI2etwhP7bJTZGOk0+4tdmuQc1PbJv:VEkI+I5eQzbJTZ3fJv
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2