a3d2e3cb59e1babbd41a061675a142ea154f5714dc83cb1888c33be15731714a | Triage

Sharing

General

Target

a3d2e3cb59e1babbd41a061675a142ea154f5714dc83cb1888c33be15731714a
Size

678KB
Sample

221203-j48vdabe4y
MD5

3d0c6da1340e644dde589f11b0d0f586
SHA1

8b4648398a548cc933ae17b8d288d82de6d6bfc4
SHA256

a3d2e3cb59e1babbd41a061675a142ea154f5714dc83cb1888c33be15731714a
SHA512

da9a82028450e472dff78fd32e77162e0b667d15edaeecbc23ecab847517a78cc2fb31183b43b95300ece8b0b77b2af728f759ad65c97e70a0b61f52dffefeb2
SSDEEP

12288:QfZw/ja6bw4SH3eC2bfm53/5d9lkBJC3JFNAg1t6s01zUlW:sZw/jx5SHT4e5v5d9lkBJCqhd1zU8

Score

8^/10

Malware Config

Targets

- Target
  
  a3d2e3cb59e1babbd41a061675a142ea154f5714dc83cb1888c33be15731714a
- Size
  
  678KB
- MD5
  
  3d0c6da1340e644dde589f11b0d0f586
- SHA1
  
  8b4648398a548cc933ae17b8d288d82de6d6bfc4
- SHA256
  
  a3d2e3cb59e1babbd41a061675a142ea154f5714dc83cb1888c33be15731714a
- SHA512
  
  da9a82028450e472dff78fd32e77162e0b667d15edaeecbc23ecab847517a78cc2fb31183b43b95300ece8b0b77b2af728f759ad65c97e70a0b61f52dffefeb2
- SSDEEP
  
  12288:QfZw/ja6bw4SH3eC2bfm53/5d9lkBJC3JFNAg1t6s01zUlW:sZw/jx5SHT4e5v5d9lkBJCqhd1zU8
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2