a7a6b3d6b8ea4a66bf075254da67df46be8d9d37dc9046b127b63b2a494e8be9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7a6b3d6b8ea4a66bf075254da67df46be8d9d37dc9046b127b63b2a494e8be9
Size

421KB
Sample

221206-xecbrsga4t
MD5

3c973afff6acbb49be83d0db70293ed6
SHA1

3407ba702243310e5601e5174e9696f5a970cd5a
SHA256

a7a6b3d6b8ea4a66bf075254da67df46be8d9d37dc9046b127b63b2a494e8be9
SHA512

8a406fa57509e229d93684eb83a1d471e0d159ff16a80084c9dfd1bf2fd3d2dcd8dae91b3b8a29dd0205c596dc62e7fb1d3477fb34adb7de5b2086c981705c76
SSDEEP

12288:DjODTivE9GzlZ3yPRpb+Wvo3/nZFozAKR4pI:DjOysIhZ3ORpbBofZFv7pI

Score

8^/10

Malware Config

Targets

- Target
  
  a7a6b3d6b8ea4a66bf075254da67df46be8d9d37dc9046b127b63b2a494e8be9
- Size
  
  421KB
- MD5
  
  3c973afff6acbb49be83d0db70293ed6
- SHA1
  
  3407ba702243310e5601e5174e9696f5a970cd5a
- SHA256
  
  a7a6b3d6b8ea4a66bf075254da67df46be8d9d37dc9046b127b63b2a494e8be9
- SHA512
  
  8a406fa57509e229d93684eb83a1d471e0d159ff16a80084c9dfd1bf2fd3d2dcd8dae91b3b8a29dd0205c596dc62e7fb1d3477fb34adb7de5b2086c981705c76
- SSDEEP
  
  12288:DjODTivE9GzlZ3yPRpb+Wvo3/nZFozAKR4pI:DjOysIhZ3ORpbBofZFv7pI
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2