30e349b85e7a7c524d6d777abdf604d7cf94d1700c42ea1ac3fa8593c1d32ba4 | Triage

Sharing

General

Target

30e349b85e7a7c524d6d777abdf604d7cf94d1700c42ea1ac3fa8593c1d32ba4
Size

104KB
Sample

220919-dtjjvahhgp
MD5

8a0854a2ccd5b93884df1623b47d6d71
SHA1

45ad5f5e5467cae8dd035c1a0f3743b7aa6a1b84
SHA256

30e349b85e7a7c524d6d777abdf604d7cf94d1700c42ea1ac3fa8593c1d32ba4
SHA512

d4438a90ba8bc4b0c9d68fd10b7294ce9167eba3044a503560f6d0955cef04566d393cf654ea835951d96d9c827177667a240b0c9fc3b03e03924009af9b7fe7
SSDEEP

1536:l/wljBITPtbkuOL5vLJWnYlrbPMPXvPWPRPpPLCOzSo4BszKhyMee+FWMktOOqws:ZwJBUErlLCO14BiKhyMN+FPLn

Score

8^/10

Malware Config

Targets

- Target
  
  30e349b85e7a7c524d6d777abdf604d7cf94d1700c42ea1ac3fa8593c1d32ba4
- Size
  
  104KB
- MD5
  
  8a0854a2ccd5b93884df1623b47d6d71
- SHA1
  
  45ad5f5e5467cae8dd035c1a0f3743b7aa6a1b84
- SHA256
  
  30e349b85e7a7c524d6d777abdf604d7cf94d1700c42ea1ac3fa8593c1d32ba4
- SHA512
  
  d4438a90ba8bc4b0c9d68fd10b7294ce9167eba3044a503560f6d0955cef04566d393cf654ea835951d96d9c827177667a240b0c9fc3b03e03924009af9b7fe7
- SSDEEP
  
  1536:l/wljBITPtbkuOL5vLJWnYlrbPMPXvPWPRPpPLCOzSo4BszKhyMee+FWMktOOqws:ZwJBUErlLCO14BiKhyMN+FPLn
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2