4b73d0d14bc8754a2bfe8718e1d3d9d7b5d902f9b8d6336a33c7164992b81e16 | Triage

Sharing

General

Target

4b73d0d14bc8754a2bfe8718e1d3d9d7b5d902f9b8d6336a33c7164992b81e16
Size

1.6MB
Sample

230311-29hjgsbh38
MD5

9e06a0786468ed24345a62da7b900151
SHA1

d750896c4d733e08826e40a98caed1069c119d61
SHA256

4b73d0d14bc8754a2bfe8718e1d3d9d7b5d902f9b8d6336a33c7164992b81e16
SHA512

443cdd55bc6b0c169c1862eacdd0fa1fd44bbc2dfa5357a8a626b61187ab53bc372e22e154e16bae8f61eaee42efdbca1fa210b5e474f6043360d1f3dcbe34ee
SSDEEP

49152:oeZB+BfJXAEKvukFsT5/NYzLoHP8ZrOO2FKMZJAm2F:oeZB+BfKEKFsT5az8Hyz2YM2

Score

7^/10

Malware Config

Targets

- Target
  
  4b73d0d14bc8754a2bfe8718e1d3d9d7b5d902f9b8d6336a33c7164992b81e16
- Size
  
  1.6MB
- MD5
  
  9e06a0786468ed24345a62da7b900151
- SHA1
  
  d750896c4d733e08826e40a98caed1069c119d61
- SHA256
  
  4b73d0d14bc8754a2bfe8718e1d3d9d7b5d902f9b8d6336a33c7164992b81e16
- SHA512
  
  443cdd55bc6b0c169c1862eacdd0fa1fd44bbc2dfa5357a8a626b61187ab53bc372e22e154e16bae8f61eaee42efdbca1fa210b5e474f6043360d1f3dcbe34ee
- SSDEEP
  
  49152:oeZB+BfJXAEKvukFsT5/NYzLoHP8ZrOO2FKMZJAm2F:oeZB+BfKEKFsT5az8Hyz2YM2
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1