4e3f6b70dc8e75203afcc4a9a6171ed55f00ee492fa564cf2ccd3a0a4c7259eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e3f6b70dc8e75203afcc4a9a6171ed55f00ee492fa564cf2ccd3a0a4c7259eb
Size

1.5MB
Sample

230212-lz1pbaca6w
MD5

1f6273d93d693846d5f72698088e7fe6
SHA1

510aa7649e63fb26f32022c6f7a6884b942e951e
SHA256

4e3f6b70dc8e75203afcc4a9a6171ed55f00ee492fa564cf2ccd3a0a4c7259eb
SHA512

b9d1aebfcd298c0b5ddb7f82a982f406ef70e6d6e68f1301c75cfc7b5798c20b397ab6708f74092d1dadef9cfaf7cb8ca366ec85405b2054f5b75a80685a4bcd
SSDEEP

24576:JLllLl7tEtJbM1P2G8PMo5i1fI2t1CkYV7RpkQdC2R9RJtqRhWFwbUgFgVuZ8:hllL8Jb/Goh4BPtKdw2R9sRhWFM/FO5

Score

7^/10

Malware Config

Targets

- Target
  
  4e3f6b70dc8e75203afcc4a9a6171ed55f00ee492fa564cf2ccd3a0a4c7259eb
- Size
  
  1.5MB
- MD5
  
  1f6273d93d693846d5f72698088e7fe6
- SHA1
  
  510aa7649e63fb26f32022c6f7a6884b942e951e
- SHA256
  
  4e3f6b70dc8e75203afcc4a9a6171ed55f00ee492fa564cf2ccd3a0a4c7259eb
- SHA512
  
  b9d1aebfcd298c0b5ddb7f82a982f406ef70e6d6e68f1301c75cfc7b5798c20b397ab6708f74092d1dadef9cfaf7cb8ca366ec85405b2054f5b75a80685a4bcd
- SSDEEP
  
  24576:JLllLl7tEtJbM1P2G8PMo5i1fI2t1CkYV7RpkQdC2R9RJtqRhWFwbUgFgVuZ8:hllL8Jb/Goh4BPtKdw2R9sRhWFM/FO5
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1