cf9f7872dd9109d9e11f39184d19fc93f74b9c5411681c6881a12415eb0751fc | Triage

Resubmissions

27/12/2022, 00:41

221227-a15twahc5y 7

27/12/2022, 00:20

221227-amsmdshc3w 7

Sharing

General

Target

cf9f7872dd9109d9e11f39184d19fc93f74b9c5411681c6881a12415eb0751fc
Size

1.7MB
Sample

221227-a15twahc5y
MD5

39fa68973af1c0d337504dc5f5a78c19
SHA1

ef0a813e0667a0fd0bb7f3856a3a43f910fd07b8
SHA256

cf9f7872dd9109d9e11f39184d19fc93f74b9c5411681c6881a12415eb0751fc
SHA512

25c944174c1387c881ed5b01e25f7190519fbdca7a8e51f7f1de87954b7f2aded3bdff65c30294e68b3c1512ce1f38ae7b7d62c030ee214ffcbee08f3398c538
SSDEEP

49152:084cPIOD7j5EfFtmwLWwzshG41qQfMqhyf3hVEtg:6cPIOD7jWfWwLWwz8G4xfMqhyJVEa

Score

7^/10

Malware Config

Targets

- Target
  
  cf9f7872dd9109d9e11f39184d19fc93f74b9c5411681c6881a12415eb0751fc
- Size
  
  1.7MB
- MD5
  
  39fa68973af1c0d337504dc5f5a78c19
- SHA1
  
  ef0a813e0667a0fd0bb7f3856a3a43f910fd07b8
- SHA256
  
  cf9f7872dd9109d9e11f39184d19fc93f74b9c5411681c6881a12415eb0751fc
- SHA512
  
  25c944174c1387c881ed5b01e25f7190519fbdca7a8e51f7f1de87954b7f2aded3bdff65c30294e68b3c1512ce1f38ae7b7d62c030ee214ffcbee08f3398c538
- SSDEEP
  
  49152:084cPIOD7j5EfFtmwLWwzshG41qQfMqhyf3hVEtg:6cPIOD7jWfWwLWwz8G4xfMqhyJVEa
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2