619a7d9768a2a06bc4f3c7c50048035a993a13c8f68188122e2acd1ba9c3f819 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

619a7d9768a2a06bc4f3c7c50048035a993a13c8f68188122e2acd1ba9c3f819
Size

1.3MB
Sample

221008-1rmvtafhfk
MD5

d5507244d42909573f3f85c55c3b3013
SHA1

d7c3b8a3b1908ef5275cc4b785408ceb7b066167
SHA256

619a7d9768a2a06bc4f3c7c50048035a993a13c8f68188122e2acd1ba9c3f819
SHA512

23151563a5780d8f5e80ca002793f557cad37ccce603e8778c813a32ddb8a860405d2d2e3a97f6aab20324e013e4305c145166a8bc149f1e6cd63f6d19123c6c
SSDEEP

24576:r79hex5LaWVhKb57wNZTumDHf7dm1eLOtKqzYrqu1HpmQjJA:r7o8Wmb57WZTZ5e3t1zYxMb

Score

8^/10

Malware Config

Targets

- Target
  
  619a7d9768a2a06bc4f3c7c50048035a993a13c8f68188122e2acd1ba9c3f819
- Size
  
  1.3MB
- MD5
  
  d5507244d42909573f3f85c55c3b3013
- SHA1
  
  d7c3b8a3b1908ef5275cc4b785408ceb7b066167
- SHA256
  
  619a7d9768a2a06bc4f3c7c50048035a993a13c8f68188122e2acd1ba9c3f819
- SHA512
  
  23151563a5780d8f5e80ca002793f557cad37ccce603e8778c813a32ddb8a860405d2d2e3a97f6aab20324e013e4305c145166a8bc149f1e6cd63f6d19123c6c
- SSDEEP
  
  24576:r79hex5LaWVhKb57wNZTumDHf7dm1eLOtKqzYrqu1HpmQjJA:r7o8Wmb57WZTZ5e3t1zYxMb
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2