946a42cb440b7c7f5593ed38ac3f39d940952bcebf68391067dbdf0471a47c20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

946a42cb440b7c7f5593ed38ac3f39d940952bcebf68391067dbdf0471a47c20
Size

4.6MB
Sample

221206-22hvaafc2w
MD5

60c94422c908e9055fbfc07970a3fa72
SHA1

551369f7bd00f1ba42e44150ba3edb4ec7776589
SHA256

946a42cb440b7c7f5593ed38ac3f39d940952bcebf68391067dbdf0471a47c20
SHA512

5759ddd8c7e21af0704280d951631da9f8b23c39e4e98959366530c472fdc0ade0e49632896f632fdd32b764b17024799260e14e4875a40d6810177c10ac3cef
SSDEEP

98304:uSFIr3vyA3LybJAzdz2SdBfS0a5SyWqXaf+BYgC1o:bF4yKyb0dzd/q0WSyWqXaf+B7C1o

Score

8^/10

Malware Config

Targets

- Target
  
  946a42cb440b7c7f5593ed38ac3f39d940952bcebf68391067dbdf0471a47c20
- Size
  
  4.6MB
- MD5
  
  60c94422c908e9055fbfc07970a3fa72
- SHA1
  
  551369f7bd00f1ba42e44150ba3edb4ec7776589
- SHA256
  
  946a42cb440b7c7f5593ed38ac3f39d940952bcebf68391067dbdf0471a47c20
- SHA512
  
  5759ddd8c7e21af0704280d951631da9f8b23c39e4e98959366530c472fdc0ade0e49632896f632fdd32b764b17024799260e14e4875a40d6810177c10ac3cef
- SSDEEP
  
  98304:uSFIr3vyA3LybJAzdz2SdBfS0a5SyWqXaf+BYgC1o:bF4yKyb0dzd/q0WSyWqXaf+B7C1o
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2