667b5239ec62f820fb06b89bb279ad771113ca164b03abb734bef789ebad2cd3 | Triage

Sharing

General

Target

667b5239ec62f820fb06b89bb279ad771113ca164b03abb734bef789ebad2cd3
Size

206KB
Sample

230607-15bppsge89
MD5

0579ba8eb900590e999cca9332a53241
SHA1

9c8a8a325c4282e995f4786394a1e2540f5ca593
SHA256

667b5239ec62f820fb06b89bb279ad771113ca164b03abb734bef789ebad2cd3
SHA512

2b45196f6b1df63c2c539d3b6ad9df4ede3b88aaf4c247b941145744cb7c46716be4ceeac810502a6d3c2086bfc285ddd2d64a6c03b27dd3712f12fc1659cc4c
SSDEEP

3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score

7^/10

Malware Config

Targets

- Target
  
  667b5239ec62f820fb06b89bb279ad771113ca164b03abb734bef789ebad2cd3
- Size
  
  206KB
- MD5
  
  0579ba8eb900590e999cca9332a53241
- SHA1
  
  9c8a8a325c4282e995f4786394a1e2540f5ca593
- SHA256
  
  667b5239ec62f820fb06b89bb279ad771113ca164b03abb734bef789ebad2cd3
- SHA512
  
  2b45196f6b1df63c2c539d3b6ad9df4ede3b88aaf4c247b941145744cb7c46716be4ceeac810502a6d3c2086bfc285ddd2d64a6c03b27dd3712f12fc1659cc4c
- SSDEEP
  
  3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1