9d075a55884504f93f4d85f93c80a9a8c53c24e75b757119bbdeb68b0eec0e23 | Triage

Sharing

General

Target

9d075a55884504f93f4d85f93c80a9a8c53c24e75b757119bbdeb68b0eec0e23
Size

207KB
Sample

230608-dm4lfabh5s
MD5

84039c14a892a6a8be7ead4432721a5a
SHA1

92da4c72d2f821bc846725363c6137f92f9a5cc7
SHA256

9d075a55884504f93f4d85f93c80a9a8c53c24e75b757119bbdeb68b0eec0e23
SHA512

6f62e6b2af95aab2860263e73c0119ac2fdb0d459aaaafadeb03628db36b96d169449200f5363a626d8b35b80d0d9c798910c0f9d90edf8985a6aea84ad6cbce
SSDEEP

3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score

7^/10

Malware Config

Targets

- Target
  
  9d075a55884504f93f4d85f93c80a9a8c53c24e75b757119bbdeb68b0eec0e23
- Size
  
  207KB
- MD5
  
  84039c14a892a6a8be7ead4432721a5a
- SHA1
  
  92da4c72d2f821bc846725363c6137f92f9a5cc7
- SHA256
  
  9d075a55884504f93f4d85f93c80a9a8c53c24e75b757119bbdeb68b0eec0e23
- SHA512
  
  6f62e6b2af95aab2860263e73c0119ac2fdb0d459aaaafadeb03628db36b96d169449200f5363a626d8b35b80d0d9c798910c0f9d90edf8985a6aea84ad6cbce
- SSDEEP
  
  3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1