5b8ec7158e7d5da3c7189b6e1fd0985600800587ff93663403362d794c1c2ac0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b8ec7158e7d5da3c7189b6e1fd0985600800587ff93663403362d794c1c2ac0
Size

206KB
Sample

230607-x3t7gseh64
MD5

0227719e3862f1489d93fff112d89f9d
SHA1

efd08b3b0bf19ab7c6e31572ea72ad478d7730cc
SHA256

5b8ec7158e7d5da3c7189b6e1fd0985600800587ff93663403362d794c1c2ac0
SHA512

9997f411ea8f519681d49bdd5af191bae2f61dfbae42c8a70043171b12c39f4b95b9b049fde531a0fc58131be1cfed422adbef92ce30b30b498dc6c8d45c722e
SSDEEP

3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score

7^/10

Malware Config

Targets

- Target
  
  5b8ec7158e7d5da3c7189b6e1fd0985600800587ff93663403362d794c1c2ac0
- Size
  
  206KB
- MD5
  
  0227719e3862f1489d93fff112d89f9d
- SHA1
  
  efd08b3b0bf19ab7c6e31572ea72ad478d7730cc
- SHA256
  
  5b8ec7158e7d5da3c7189b6e1fd0985600800587ff93663403362d794c1c2ac0
- SHA512
  
  9997f411ea8f519681d49bdd5af191bae2f61dfbae42c8a70043171b12c39f4b95b9b049fde531a0fc58131be1cfed422adbef92ce30b30b498dc6c8d45c722e
- SSDEEP
  
  3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1