4d106ccc34dad4258c596a4f9ea398363c074f3d9c3b76dfad5f972ca398c513 | Triage

Sharing

General

Target

4d106ccc34dad4258c596a4f9ea398363c074f3d9c3b76dfad5f972ca398c513
Size

205KB
Sample

230607-pa2rvsaf3x
MD5

4b3fd040261b02073c424d8249d7ebc2
SHA1

8a5fe26bcd7f96edb4a573ee26a2d5ef3773862c
SHA256

4d106ccc34dad4258c596a4f9ea398363c074f3d9c3b76dfad5f972ca398c513
SHA512

d8b0710432838039a6a4418bf510d977312f4ee234f2b33d28b7ea741ef10234e7657614708da3f8946b3e13cdfc4d40208c9a8aa0d83e8c202638f0968ce920
SSDEEP

3072:meTRJ0kHbnpN23kQKp5XzutZXKGrpeN84LuZAIybiy3xEfbi:FTR2AnpN2wDurXBeBuZAIMEj

Score

7^/10

Malware Config

Targets

- Target
  
  4d106ccc34dad4258c596a4f9ea398363c074f3d9c3b76dfad5f972ca398c513
- Size
  
  205KB
- MD5
  
  4b3fd040261b02073c424d8249d7ebc2
- SHA1
  
  8a5fe26bcd7f96edb4a573ee26a2d5ef3773862c
- SHA256
  
  4d106ccc34dad4258c596a4f9ea398363c074f3d9c3b76dfad5f972ca398c513
- SHA512
  
  d8b0710432838039a6a4418bf510d977312f4ee234f2b33d28b7ea741ef10234e7657614708da3f8946b3e13cdfc4d40208c9a8aa0d83e8c202638f0968ce920
- SSDEEP
  
  3072:meTRJ0kHbnpN23kQKp5XzutZXKGrpeN84LuZAIybiy3xEfbi:FTR2AnpN2wDurXBeBuZAIMEj
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1