6f2addb863b2ca45445fb05db0c52597bbf0efe25b3fc551a499a64eecf75111 | Triage

Sharing

General

Target

6f2addb863b2ca45445fb05db0c52597bbf0efe25b3fc551a499a64eecf75111
Size

1.6MB
Sample

230615-thttfaad78
MD5

22d399db8d726bbf8930705b86a2ed4a
SHA1

85f475e4ae98ecf7f1b48cb80585a3b183d08c3d
SHA256

6f2addb863b2ca45445fb05db0c52597bbf0efe25b3fc551a499a64eecf75111
SHA512

0ff9b6250dfb882ec408df7ea641ff571048f08390eef79cb1ce045099a7c20479edba74decac8fca38513228002977a1d4be2f56fa561c74ace81af92e94f8a
SSDEEP

49152:fgwRJzHnkCBpIqNdfZeapJzoea55esZwkc2g:fgwRJzHnqq57zK5vwkpg

Score

7^/10

Malware Config

Targets

- Target
  
  6f2addb863b2ca45445fb05db0c52597bbf0efe25b3fc551a499a64eecf75111
- Size
  
  1.6MB
- MD5
  
  22d399db8d726bbf8930705b86a2ed4a
- SHA1
  
  85f475e4ae98ecf7f1b48cb80585a3b183d08c3d
- SHA256
  
  6f2addb863b2ca45445fb05db0c52597bbf0efe25b3fc551a499a64eecf75111
- SHA512
  
  0ff9b6250dfb882ec408df7ea641ff571048f08390eef79cb1ce045099a7c20479edba74decac8fca38513228002977a1d4be2f56fa561c74ace81af92e94f8a
- SSDEEP
  
  49152:fgwRJzHnkCBpIqNdfZeapJzoea55esZwkc2g:fgwRJzHnqq57zK5vwkpg
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2