3d67c504ec04074f9f3d762da96c11d50fd6dfc0cf0ced3b4af477987750ada0 | Triage

Sharing

General

Target

3d67c504ec04074f9f3d762da96c11d50fd6dfc0cf0ced3b4af477987750ada0
Size

385KB
Sample

221205-kzg2jahd9y
MD5

49ba2c29dfb2755a6dd1cd3b7384a24c
SHA1

0c4dec96f506eb9cdcb30a795e519794c130f186
SHA256

3d67c504ec04074f9f3d762da96c11d50fd6dfc0cf0ced3b4af477987750ada0
SHA512

6871fdaa6c530cbcaeac92611471498d8a8891932d8d780528a9f255d0694ede58a87f8575c4aa892df35d9978342480ab7da5fe4e344bbbd6057b32e882d974
SSDEEP

6144:JZuuObR8sVImcyY6MRforPZrZcja8wNf8SrpPiXKtSnzXvd/m7wg9jsSPK:mV+mzzMcZr++5N0ScKwnLVe8gc

Score

8^/10

Malware Config

Targets

- Target
  
  3d67c504ec04074f9f3d762da96c11d50fd6dfc0cf0ced3b4af477987750ada0
- Size
  
  385KB
- MD5
  
  49ba2c29dfb2755a6dd1cd3b7384a24c
- SHA1
  
  0c4dec96f506eb9cdcb30a795e519794c130f186
- SHA256
  
  3d67c504ec04074f9f3d762da96c11d50fd6dfc0cf0ced3b4af477987750ada0
- SHA512
  
  6871fdaa6c530cbcaeac92611471498d8a8891932d8d780528a9f255d0694ede58a87f8575c4aa892df35d9978342480ab7da5fe4e344bbbd6057b32e882d974
- SSDEEP
  
  6144:JZuuObR8sVImcyY6MRforPZrZcja8wNf8SrpPiXKtSnzXvd/m7wg9jsSPK:mV+mzzMcZr++5N0ScKwnLVe8gc
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2