d343041c0613d26b19eaca91a868a6b517b0fd9fb8cf119980620d1871350af8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d343041c0613d26b19eaca91a868a6b517b0fd9fb8cf119980620d1871350af8
Size

299KB
Sample

221204-h99hesgh64
MD5

31230fe713cc54d0791a7923983f6efd
SHA1

b652260033b8214a6b1e6e0dceb1b661f9645cab
SHA256

d343041c0613d26b19eaca91a868a6b517b0fd9fb8cf119980620d1871350af8
SHA512

d3557773d1040945cde1afe7eaec673fc0262476faeccd92e333887fc50192e507353651299b5fe2a4cf5f3c39ff7fa8a31ee0bd544023195badd81c00e88a97
SSDEEP

6144:WNcxGLJ184LVB8V6sytl3GctvX++uY60Lg6t/kp:WNcxohZB8VEtl1g+uYrB/I

Score

8^/10

Malware Config

Targets

- Target
  
  d343041c0613d26b19eaca91a868a6b517b0fd9fb8cf119980620d1871350af8
- Size
  
  299KB
- MD5
  
  31230fe713cc54d0791a7923983f6efd
- SHA1
  
  b652260033b8214a6b1e6e0dceb1b661f9645cab
- SHA256
  
  d343041c0613d26b19eaca91a868a6b517b0fd9fb8cf119980620d1871350af8
- SHA512
  
  d3557773d1040945cde1afe7eaec673fc0262476faeccd92e333887fc50192e507353651299b5fe2a4cf5f3c39ff7fa8a31ee0bd544023195badd81c00e88a97
- SSDEEP
  
  6144:WNcxGLJ184LVB8V6sytl3GctvX++uY60Lg6t/kp:WNcxohZB8VEtl1g+uYrB/I
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2