2a21da4175eee4fcf3287e4bf3e5427d5270232558329c4ca4b34f04341ef6a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a21da4175eee4fcf3287e4bf3e5427d5270232558329c4ca4b34f04341ef6a5
Size

1.6MB
Sample

230102-s5817shh8t
MD5

14e3b9b38c97efba12cf90755dc71579
SHA1

67e0fd88bbeddacb0e0303a51bdf93746b4f9ce9
SHA256

2a21da4175eee4fcf3287e4bf3e5427d5270232558329c4ca4b34f04341ef6a5
SHA512

c4a282dca0f132befc1f87bccfab7226f269f7f1ad3f4538ab6034ae1f1f83a11add89d04715f486ebd849acffa10d790c48e14bf6a05440e6d1b1002e15cd22
SSDEEP

49152:/eZBYBfJXAElWD+D2Emnahm/dT8NqULagbQZ65zcy48YloLi0:/eZBYBfKElTKEZqZ8eyQZQzcy48YloL9

Score

7^/10

Malware Config

Targets

- Target
  
  2a21da4175eee4fcf3287e4bf3e5427d5270232558329c4ca4b34f04341ef6a5
- Size
  
  1.6MB
- MD5
  
  14e3b9b38c97efba12cf90755dc71579
- SHA1
  
  67e0fd88bbeddacb0e0303a51bdf93746b4f9ce9
- SHA256
  
  2a21da4175eee4fcf3287e4bf3e5427d5270232558329c4ca4b34f04341ef6a5
- SHA512
  
  c4a282dca0f132befc1f87bccfab7226f269f7f1ad3f4538ab6034ae1f1f83a11add89d04715f486ebd849acffa10d790c48e14bf6a05440e6d1b1002e15cd22
- SSDEEP
  
  49152:/eZBYBfJXAElWD+D2Emnahm/dT8NqULagbQZ65zcy48YloLi0:/eZBYBfKElTKEZqZ8eyQZQzcy48YloL9
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1