674a3b464425cc4a9e9ac17fd3d63bb44fc23921027e0b1377d386c77f1444c8 | Triage

Sharing

General

Target

674a3b464425cc4a9e9ac17fd3d63bb44fc23921027e0b1377d386c77f1444c8
Size

205KB
Sample

230607-slem9acf7z
MD5

d54f96178ab22d5ef13bc289372827d9
SHA1

e3871f85a72abf896275aab85289115e94f43bab
SHA256

674a3b464425cc4a9e9ac17fd3d63bb44fc23921027e0b1377d386c77f1444c8
SHA512

c864690ac46de30d36da684021469a06a1db6be8daed2ec6491397a70437d1e3540c7d6068efa10592af836d1890da0256d7783db1e495f12098e5b0d2608031
SSDEEP

3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score

7^/10

Malware Config

Targets

- Target
  
  674a3b464425cc4a9e9ac17fd3d63bb44fc23921027e0b1377d386c77f1444c8
- Size
  
  205KB
- MD5
  
  d54f96178ab22d5ef13bc289372827d9
- SHA1
  
  e3871f85a72abf896275aab85289115e94f43bab
- SHA256
  
  674a3b464425cc4a9e9ac17fd3d63bb44fc23921027e0b1377d386c77f1444c8
- SHA512
  
  c864690ac46de30d36da684021469a06a1db6be8daed2ec6491397a70437d1e3540c7d6068efa10592af836d1890da0256d7783db1e495f12098e5b0d2608031
- SSDEEP
  
  3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1