2fa9e31ff5159a6999592291830d7fcd1e5cc71c9a3556932b53c1dfaeb09def | Triage

Sharing

General

Target

2fa9e31ff5159a6999592291830d7fcd1e5cc71c9a3556932b53c1dfaeb09def
Size

1.2MB
Sample

221205-spg8jseh61
MD5

77a7453e1ef9aaccae6c8ce833470694
SHA1

9dc95fbc508734bdc60069faf4112c34cff8313e
SHA256

2fa9e31ff5159a6999592291830d7fcd1e5cc71c9a3556932b53c1dfaeb09def
SHA512

3813cdd1cf34f7c91926e13f119951a484106dbfbb899595a9bc84131ff98ef4be0acc15462ec48e746646f6755ec00c901eff4eedb588cc6b1b4af9caf6c71f
SSDEEP

24576:vvs4Nb+6ub8BaKzBJSQxHuMJuI5uLr9j3GIH1qMQQyZ:vvpDLSgj5uLH8QyZ

Score

8^/10

Malware Config

Targets

- Target
  
  2fa9e31ff5159a6999592291830d7fcd1e5cc71c9a3556932b53c1dfaeb09def
- Size
  
  1.2MB
- MD5
  
  77a7453e1ef9aaccae6c8ce833470694
- SHA1
  
  9dc95fbc508734bdc60069faf4112c34cff8313e
- SHA256
  
  2fa9e31ff5159a6999592291830d7fcd1e5cc71c9a3556932b53c1dfaeb09def
- SHA512
  
  3813cdd1cf34f7c91926e13f119951a484106dbfbb899595a9bc84131ff98ef4be0acc15462ec48e746646f6755ec00c901eff4eedb588cc6b1b4af9caf6c71f
- SSDEEP
  
  24576:vvs4Nb+6ub8BaKzBJSQxHuMJuI5uLr9j3GIH1qMQQyZ:vvpDLSgj5uLH8QyZ
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Drops startup file
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2