faf4be66da449bcdd50088c2dd63dc48cedae9e6957b64a74848b84e3c387a5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faf4be66da449bcdd50088c2dd63dc48cedae9e6957b64a74848b84e3c387a5d
Size

1.1MB
Sample

221204-f9h95aah89
MD5

67c915423deb4da88690dd06704a1f6d
SHA1

36391d0cad3f7821a8d719d826daefa725504184
SHA256

faf4be66da449bcdd50088c2dd63dc48cedae9e6957b64a74848b84e3c387a5d
SHA512

d8f812eba10c3f5210fa6b1d8925c69755c9e84e1816372fa65accf135e6413b623731dd9b07a005bf680e7dc11efccbaa4a0a7ca6a4e245b7a871dc79907421
SSDEEP

24576:wM0peow6/GmPN760aABzSbE0nc4v2o6IsQPTYDIH17GwoYk:UTbVSrz6nWH1GPj

Score

8^/10

Malware Config

Targets

- Target
  
  faf4be66da449bcdd50088c2dd63dc48cedae9e6957b64a74848b84e3c387a5d
- Size
  
  1.1MB
- MD5
  
  67c915423deb4da88690dd06704a1f6d
- SHA1
  
  36391d0cad3f7821a8d719d826daefa725504184
- SHA256
  
  faf4be66da449bcdd50088c2dd63dc48cedae9e6957b64a74848b84e3c387a5d
- SHA512
  
  d8f812eba10c3f5210fa6b1d8925c69755c9e84e1816372fa65accf135e6413b623731dd9b07a005bf680e7dc11efccbaa4a0a7ca6a4e245b7a871dc79907421
- SSDEEP
  
  24576:wM0peow6/GmPN760aABzSbE0nc4v2o6IsQPTYDIH17GwoYk:UTbVSrz6nWH1GPj
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Drops startup file
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2