3912105fb7205a446f8bd73ebd21efd1c628b1d243a339c8c0d3fd684697b3e5 | Triage

Sharing

General

Target

3912105fb7205a446f8bd73ebd21efd1c628b1d243a339c8c0d3fd684697b3e5
Size

343KB
Sample

221206-t6321shc7w
MD5

37f698206c504b3d910aa80159176390
SHA1

affe89ead19dcb98eb6b3add29b0411b94b68ee9
SHA256

3912105fb7205a446f8bd73ebd21efd1c628b1d243a339c8c0d3fd684697b3e5
SHA512

6a75ddd391616e5c4074557ac2eff5a519d295b3c115004481392cf8d70f9addf07805d87f082866036bea3cc1b3cd471e769396b55e8dc908ed11510ec70801
SSDEEP

6144:WJ+SJhKb7cpwPBAggA6dqEGXDFqJH1dabccbi+bNjS8ki/gtL+fdzUTwMQsWt:zvcpwPrgLdq/0j2bNTtglW

Score

8^/10

Malware Config

Targets

- Target
  
  3912105fb7205a446f8bd73ebd21efd1c628b1d243a339c8c0d3fd684697b3e5
- Size
  
  343KB
- MD5
  
  37f698206c504b3d910aa80159176390
- SHA1
  
  affe89ead19dcb98eb6b3add29b0411b94b68ee9
- SHA256
  
  3912105fb7205a446f8bd73ebd21efd1c628b1d243a339c8c0d3fd684697b3e5
- SHA512
  
  6a75ddd391616e5c4074557ac2eff5a519d295b3c115004481392cf8d70f9addf07805d87f082866036bea3cc1b3cd471e769396b55e8dc908ed11510ec70801
- SSDEEP
  
  6144:WJ+SJhKb7cpwPBAggA6dqEGXDFqJH1dabccbi+bNjS8ki/gtL+fdzUTwMQsWt:zvcpwPrgLdq/0j2bNTtglW
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2