1a15ecbed1c2a84679afee7ec9c0d5b238a3a4db5558b91732a8c5e92ed3877c | Triage

Sharing

General

Target

1a15ecbed1c2a84679afee7ec9c0d5b238a3a4db5558b91732a8c5e92ed3877c
Size

1.1MB
Sample

221202-a3gvtsbd9z
MD5

f2807c4c959edfb08b60d8ffce7e63d9
SHA1

74cdff1f7d38c954e5fe8f610367d97e74e27cdf
SHA256

1a15ecbed1c2a84679afee7ec9c0d5b238a3a4db5558b91732a8c5e92ed3877c
SHA512

15d83808b4c4308c6d7a3423f7507865f0daa41c8fe2eb6786456b8095fb07e5c34d35a0f0dff9ae5aca64e55fe7516fcd452eb776e743be9bbc7514fe33815e
SSDEEP

24576:K9ODw74FKZJS8GQB3STI3hQeTeSUxXTtsdiacph/g:KMQJSe4xJxplg

Score

8^/10

Malware Config

Targets

- Target
  
  1a15ecbed1c2a84679afee7ec9c0d5b238a3a4db5558b91732a8c5e92ed3877c
- Size
  
  1.1MB
- MD5
  
  f2807c4c959edfb08b60d8ffce7e63d9
- SHA1
  
  74cdff1f7d38c954e5fe8f610367d97e74e27cdf
- SHA256
  
  1a15ecbed1c2a84679afee7ec9c0d5b238a3a4db5558b91732a8c5e92ed3877c
- SHA512
  
  15d83808b4c4308c6d7a3423f7507865f0daa41c8fe2eb6786456b8095fb07e5c34d35a0f0dff9ae5aca64e55fe7516fcd452eb776e743be9bbc7514fe33815e
- SSDEEP
  
  24576:K9ODw74FKZJS8GQB3STI3hQeTeSUxXTtsdiacph/g:KMQJSe4xJxplg
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Drops startup file
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2