f1a5d21735a65b031448f0a45c4c14eaf11e27c41853dad2a116ed95296b833a | Triage

Sharing

General

Target

f1a5d21735a65b031448f0a45c4c14eaf11e27c41853dad2a116ed95296b833a
Size

609KB
Sample

221205-jxlq9see4z
MD5

38b9170daa56351b2a206521d0a4d23f
SHA1

b5fa323cb683339dd94e005630a63a7fd303f997
SHA256

f1a5d21735a65b031448f0a45c4c14eaf11e27c41853dad2a116ed95296b833a
SHA512

8e5b61cbc298fb38125e0ef802efd5274830ae73e92fdd5cf14371b507688ea76eaa0ad5d19aa63be7054c27bfc1935e85bc0ff2ffdd0564182d1e50a3db74c1
SSDEEP

12288:my7UCurTDV/Omeo8huhYO7ZPtFXYMgin0sYKnGL07tWRYKBT7tSyapU:my7U7Z/OV0v7RX/1n0BKa0I6KR2O

Score

8^/10

Malware Config

Targets

- Target
  
  f1a5d21735a65b031448f0a45c4c14eaf11e27c41853dad2a116ed95296b833a
- Size
  
  609KB
- MD5
  
  38b9170daa56351b2a206521d0a4d23f
- SHA1
  
  b5fa323cb683339dd94e005630a63a7fd303f997
- SHA256
  
  f1a5d21735a65b031448f0a45c4c14eaf11e27c41853dad2a116ed95296b833a
- SHA512
  
  8e5b61cbc298fb38125e0ef802efd5274830ae73e92fdd5cf14371b507688ea76eaa0ad5d19aa63be7054c27bfc1935e85bc0ff2ffdd0564182d1e50a3db74c1
- SSDEEP
  
  12288:my7UCurTDV/Omeo8huhYO7ZPtFXYMgin0sYKnGL07tWRYKBT7tSyapU:my7U7Z/OV0v7RX/1n0BKa0I6KR2O
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2