d8b4701f12fd0da2e1276e4e05fc375b0759759e1ad54911c167c10b74dbf770 | Triage

Sharing

General

Target

d8b4701f12fd0da2e1276e4e05fc375b0759759e1ad54911c167c10b74dbf770
Size

205KB
Sample

230607-n62ajaaa24
MD5

602fe33a1bf53fcdedaaba2cd41a03bc
SHA1

eb90a147b563192dcdf6475dd9898fdbd9735f84
SHA256

d8b4701f12fd0da2e1276e4e05fc375b0759759e1ad54911c167c10b74dbf770
SHA512

25cec522d46d235deb4c1e490e8fc89841ce5ecbdab6c10a5398140fe477dc69e11071e000c13a6b87225ece0c66cbbe85bdcdf2fec5e5c206c2ed586e892c1f
SSDEEP

3072:meTRJ0kHbnpN23kQKp5XzutZXKGrpeN84LuZAIybiy3xEfbi:FTR2AnpN2wDurXBeBuZAIMEj

Score

7^/10

Malware Config

Targets

- Target
  
  d8b4701f12fd0da2e1276e4e05fc375b0759759e1ad54911c167c10b74dbf770
- Size
  
  205KB
- MD5
  
  602fe33a1bf53fcdedaaba2cd41a03bc
- SHA1
  
  eb90a147b563192dcdf6475dd9898fdbd9735f84
- SHA256
  
  d8b4701f12fd0da2e1276e4e05fc375b0759759e1ad54911c167c10b74dbf770
- SHA512
  
  25cec522d46d235deb4c1e490e8fc89841ce5ecbdab6c10a5398140fe477dc69e11071e000c13a6b87225ece0c66cbbe85bdcdf2fec5e5c206c2ed586e892c1f
- SSDEEP
  
  3072:meTRJ0kHbnpN23kQKp5XzutZXKGrpeN84LuZAIybiy3xEfbi:FTR2AnpN2wDurXBeBuZAIMEj
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1