ab2894916ee51487f4a3405783dfb37b2df98920560c11b7814970bff10feea1 | Triage

Sharing

General

Target

ab2894916ee51487f4a3405783dfb37b2df98920560c11b7814970bff10feea1
Size

1.2MB
Sample

230327-bt4hxaah95
MD5

bff91d1335ec71ff61694b2abb06a649
SHA1

58f140da7046195745e0978d61debee3f139842f
SHA256

ab2894916ee51487f4a3405783dfb37b2df98920560c11b7814970bff10feea1
SHA512

d191e89e9f4358d1b6609f5eac2fa0e4ba221d5718d0832b3e58d423e9cd1fa07a8c82050a2fb61deea58f40433e579c3b81be185d98dc54b91583dd1f56f651
SSDEEP

24576:I/XEXjJSFHUKBjibjqNyj9wowTQ7Z6q8j6kIfEOZdVndDkRO8PcE+m4g9FX:I/oSBajgySiZ6aPZNIIK+m4g9FX

Score

7^/10

Malware Config

Targets

- Target
  
  ab2894916ee51487f4a3405783dfb37b2df98920560c11b7814970bff10feea1
- Size
  
  1.2MB
- MD5
  
  bff91d1335ec71ff61694b2abb06a649
- SHA1
  
  58f140da7046195745e0978d61debee3f139842f
- SHA256
  
  ab2894916ee51487f4a3405783dfb37b2df98920560c11b7814970bff10feea1
- SHA512
  
  d191e89e9f4358d1b6609f5eac2fa0e4ba221d5718d0832b3e58d423e9cd1fa07a8c82050a2fb61deea58f40433e579c3b81be185d98dc54b91583dd1f56f651
- SSDEEP
  
  24576:I/XEXjJSFHUKBjibjqNyj9wowTQ7Z6q8j6kIfEOZdVndDkRO8PcE+m4g9FX:I/oSBajgySiZ6aPZNIIK+m4g9FX
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1