8934fe22b2766850a67db602379e906d68122d436368f86e730a6e897fb4ebca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8934fe22b2766850a67db602379e906d68122d436368f86e730a6e897fb4ebca
Size

57KB
Sample

221205-m5n35sch53
MD5

b9687de850f32912bf16989040f40a6d
SHA1

b63084a08fe08c80cef0bdd4ce8e221b607e9dde
SHA256

8934fe22b2766850a67db602379e906d68122d436368f86e730a6e897fb4ebca
SHA512

08bd1a069a98d1a472d64394fa82fa7b34d0b3d8e966286cb3b264a25b697ba1e57509f1756a1b3dcfb7c8432e5fa3175bf45593d4940f6cda38bf0176abe005
SSDEEP

1536:QwLD8sK0m3aHUMwLZmJLyfNd/TXHDJFfs5kX:QwjmK0lZmJLy1BHbEkX

Score

8^/10

Malware Config

Targets

- Target
  
  8934fe22b2766850a67db602379e906d68122d436368f86e730a6e897fb4ebca
- Size
  
  57KB
- MD5
  
  b9687de850f32912bf16989040f40a6d
- SHA1
  
  b63084a08fe08c80cef0bdd4ce8e221b607e9dde
- SHA256
  
  8934fe22b2766850a67db602379e906d68122d436368f86e730a6e897fb4ebca
- SHA512
  
  08bd1a069a98d1a472d64394fa82fa7b34d0b3d8e966286cb3b264a25b697ba1e57509f1756a1b3dcfb7c8432e5fa3175bf45593d4940f6cda38bf0176abe005
- SSDEEP
  
  1536:QwLD8sK0m3aHUMwLZmJLyfNd/TXHDJFfs5kX:QwjmK0lZmJLy1BHbEkX
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2