7333119d33b6a052a8339c16431811b991ed7f32f30fb60527f7ea5f255d4eb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7333119d33b6a052a8339c16431811b991ed7f32f30fb60527f7ea5f255d4eb8
Size

2.2MB
Sample

221203-xsheyaga99
MD5

42b5065a3f0ed949ec2d50c23cc3d5d1
SHA1

c27772ff9cb3f3542dd26d15a50c775c2689a321
SHA256

7333119d33b6a052a8339c16431811b991ed7f32f30fb60527f7ea5f255d4eb8
SHA512

11768e67863b72040eb7f26ea4b3338281fc58fce32831b96c966ec76201c2a37eae070c358e975556a48d8867f4f81e03947c832fc06a569b17c787cce2b6ae
SSDEEP

49152:TlBfJXAEGoKdpmED7i7lNjgc8M4DA3apllFCIMt69u/80UU4C:TlBfKEum4i3kJZA3apJM6ukhUV

Score

7^/10

Malware Config

Targets

- Target
  
  7333119d33b6a052a8339c16431811b991ed7f32f30fb60527f7ea5f255d4eb8
- Size
  
  2.2MB
- MD5
  
  42b5065a3f0ed949ec2d50c23cc3d5d1
- SHA1
  
  c27772ff9cb3f3542dd26d15a50c775c2689a321
- SHA256
  
  7333119d33b6a052a8339c16431811b991ed7f32f30fb60527f7ea5f255d4eb8
- SHA512
  
  11768e67863b72040eb7f26ea4b3338281fc58fce32831b96c966ec76201c2a37eae070c358e975556a48d8867f4f81e03947c832fc06a569b17c787cce2b6ae
- SSDEEP
  
  49152:TlBfJXAEGoKdpmED7i7lNjgc8M4DA3apllFCIMt69u/80UU4C:TlBfKEum4i3kJZA3apJM6ukhUV
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1