0588a9d391570b4bcc6eb7187fae4d749c9c946d666e78bab0fa88908611a903 | Triage

Sharing

General

Target

0588a9d391570b4bcc6eb7187fae4d749c9c946d666e78bab0fa88908611a903
Size

207KB
Sample

230608-c9fx8abb44
MD5

8a99f71e7ccd5cdbffeb5d689d283b0a
SHA1

e6c5156d0cfefdd1111622acd05161d7c11a010b
SHA256

0588a9d391570b4bcc6eb7187fae4d749c9c946d666e78bab0fa88908611a903
SHA512

5b6667653a08e45f767a181b18e9dc8537f6d953d49b3280f0441da1728da3f0a55c2db726fe3bed7cebc422e39bf1e473c7f494246d2db94d943724c6bccb34
SSDEEP

3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score

7^/10

Malware Config

Targets

- Target
  
  0588a9d391570b4bcc6eb7187fae4d749c9c946d666e78bab0fa88908611a903
- Size
  
  207KB
- MD5
  
  8a99f71e7ccd5cdbffeb5d689d283b0a
- SHA1
  
  e6c5156d0cfefdd1111622acd05161d7c11a010b
- SHA256
  
  0588a9d391570b4bcc6eb7187fae4d749c9c946d666e78bab0fa88908611a903
- SHA512
  
  5b6667653a08e45f767a181b18e9dc8537f6d953d49b3280f0441da1728da3f0a55c2db726fe3bed7cebc422e39bf1e473c7f494246d2db94d943724c6bccb34
- SSDEEP
  
  3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1