f3f92a16f4d0c66d1f7cecdd4d53814014c344367f532fcae5169ea3bcd025e7 | Triage

Sharing

General

Target

f3f92a16f4d0c66d1f7cecdd4d53814014c344367f532fcae5169ea3bcd025e7
Size

55KB
Sample

221203-yrvjjsba89
MD5

d2eb4797765c7c23d929b3e366dd14e4
SHA1

dd98e36855a1d4892a7504e4f9da4b5f1437d5fe
SHA256

f3f92a16f4d0c66d1f7cecdd4d53814014c344367f532fcae5169ea3bcd025e7
SHA512

cda98b8b71a3669c3b6ee60e5023285b7f408263834a9c269194ebaddc1b66d90ef43aac550584975035f0d09faf7183b2613d4500184dda0af218311dd4cc48
SSDEEP

768:d/OwWsekp55agHcMnGPrLmIdPu0ZVQ9u9qI2AbS5nzPzVantS8YzXBR:MwWm55ag8eGPrLmKW0jh9qvKqLZYUFrn

Score

8^/10

Malware Config

Targets

- Target
  
  f3f92a16f4d0c66d1f7cecdd4d53814014c344367f532fcae5169ea3bcd025e7
- Size
  
  55KB
- MD5
  
  d2eb4797765c7c23d929b3e366dd14e4
- SHA1
  
  dd98e36855a1d4892a7504e4f9da4b5f1437d5fe
- SHA256
  
  f3f92a16f4d0c66d1f7cecdd4d53814014c344367f532fcae5169ea3bcd025e7
- SHA512
  
  cda98b8b71a3669c3b6ee60e5023285b7f408263834a9c269194ebaddc1b66d90ef43aac550584975035f0d09faf7183b2613d4500184dda0af218311dd4cc48
- SSDEEP
  
  768:d/OwWsekp55agHcMnGPrLmIdPu0ZVQ9u9qI2AbS5nzPzVantS8YzXBR:MwWm55ag8eGPrLmKW0jh9qvKqLZYUFrn
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2