98652ed85186cbc65deb64a33abc35c668f7d210313784eca81a7f543bf94961 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98652ed85186cbc65deb64a33abc35c668f7d210313784eca81a7f543bf94961
Size

1.6MB
Sample

221218-q5fnjscb92
MD5

584d2fb4073fb323b2b7a2e339808c65
SHA1

ff316955c0d3b0d5d24e1e7ff5bac497c15c5514
SHA256

98652ed85186cbc65deb64a33abc35c668f7d210313784eca81a7f543bf94961
SHA512

70cd886cd07d1c401c0f09e4fcb4f0d090ab173e8c8e084d6ffc4a7985205633f7c746fc3e04923089b0f58ea771a7aa7e8bd81f1b0a56f86dba01e07df207b8
SSDEEP

49152:4unwJdB6zbtztqr5PQJC9i+PZPhnsR5mr:4KSB6zdQF4v+P9hnf

Score

7^/10

Malware Config

Targets

- Target
  
  98652ed85186cbc65deb64a33abc35c668f7d210313784eca81a7f543bf94961
- Size
  
  1.6MB
- MD5
  
  584d2fb4073fb323b2b7a2e339808c65
- SHA1
  
  ff316955c0d3b0d5d24e1e7ff5bac497c15c5514
- SHA256
  
  98652ed85186cbc65deb64a33abc35c668f7d210313784eca81a7f543bf94961
- SHA512
  
  70cd886cd07d1c401c0f09e4fcb4f0d090ab173e8c8e084d6ffc4a7985205633f7c746fc3e04923089b0f58ea771a7aa7e8bd81f1b0a56f86dba01e07df207b8
- SSDEEP
  
  49152:4unwJdB6zbtztqr5PQJC9i+PZPhnsR5mr:4KSB6zdQF4v+P9hnf
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1