df05e219810594730eb460eaef524a40bc4dc38a421d000de4fb5771a5117397 | Triage

Sharing

General

Target

df05e219810594730eb460eaef524a40bc4dc38a421d000de4fb5771a5117397
Size

206KB
Sample

230607-zr8a3sfh33
MD5

5cdd1051f86830361e9d44784bbd685b
SHA1

2a6160df1cc6619f7553197f593dcc5657f33854
SHA256

df05e219810594730eb460eaef524a40bc4dc38a421d000de4fb5771a5117397
SHA512

89c98706fa2795b4ff14db76bc24ad5d9d3c8c10ce097692e815dc5bf7a4493de0be68982a86047e3c12ed5bf8de86d5f33b2c326a462102c244755fc7f8d2fc
SSDEEP

3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score

7^/10

Malware Config

Targets

- Target
  
  df05e219810594730eb460eaef524a40bc4dc38a421d000de4fb5771a5117397
- Size
  
  206KB
- MD5
  
  5cdd1051f86830361e9d44784bbd685b
- SHA1
  
  2a6160df1cc6619f7553197f593dcc5657f33854
- SHA256
  
  df05e219810594730eb460eaef524a40bc4dc38a421d000de4fb5771a5117397
- SHA512
  
  89c98706fa2795b4ff14db76bc24ad5d9d3c8c10ce097692e815dc5bf7a4493de0be68982a86047e3c12ed5bf8de86d5f33b2c326a462102c244755fc7f8d2fc
- SSDEEP
  
  3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1