22846a4ce2d41e6016ca35cec6d8a943874f6c96a028a7a687c4794e66476168 | Triage

Sharing

General

Target

22846a4ce2d41e6016ca35cec6d8a943874f6c96a028a7a687c4794e66476168
Size

1.6MB
Sample

230509-n28h2shf3s
MD5

a1a959301554de6d7c70733a501589f5
SHA1

e21f59f43d7dc531943ec8ee9ce10bc6d1d96fd3
SHA256

22846a4ce2d41e6016ca35cec6d8a943874f6c96a028a7a687c4794e66476168
SHA512

33d7dab3d9279eaaab0f12976c8a3f99318db06053f6c7f41eaa368bce3d188e9fdfd9c821beee8324a9e8c75773e216444de57eed77861f3d6eadb10c49827b
SSDEEP

24576:hTbBv5rUmmH2mY3QtZUTNNd/EOnyTozjv63idwt2M4KXGCpmTuqaS5kld5:rBy6CGTN789TojvZwtzKCA7aPR

Score

7^/10

evasion trojan

Malware Config

Targets

- Target
  
  22846a4ce2d41e6016ca35cec6d8a943874f6c96a028a7a687c4794e66476168
- Size
  
  1.6MB
- MD5
  
  a1a959301554de6d7c70733a501589f5
- SHA1
  
  e21f59f43d7dc531943ec8ee9ce10bc6d1d96fd3
- SHA256
  
  22846a4ce2d41e6016ca35cec6d8a943874f6c96a028a7a687c4794e66476168
- SHA512
  
  33d7dab3d9279eaaab0f12976c8a3f99318db06053f6c7f41eaa368bce3d188e9fdfd9c821beee8324a9e8c75773e216444de57eed77861f3d6eadb10c49827b
- SSDEEP
  
  24576:hTbBv5rUmmH2mY3QtZUTNNd/EOnyTozjv63idwt2M4KXGCpmTuqaS5kld5:rBy6CGTN789TojvZwtzKCA7aPR
Score

7^/10

evasion trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2