4a2aa6784a8487f05263fdcb823f53953f9ed4c27ae54a9063a01b5fc96e6728 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a2aa6784a8487f05263fdcb823f53953f9ed4c27ae54a9063a01b5fc96e6728
Size

207KB
Sample

230608-frsqvacd37
MD5

12dbfc50cc97d92379a166faf2065658
SHA1

eed68d04f50e07ca2e209a5e7213fa449d8237bc
SHA256

4a2aa6784a8487f05263fdcb823f53953f9ed4c27ae54a9063a01b5fc96e6728
SHA512

15bf0d5140a236650f215211fbba1ed8d820697d147863ec625db42bc6286bdc2ad54c633b3fd5bdf8b7a2cc765c9e444dbe548795e92ad6773a7dec5180197e
SSDEEP

3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score

7^/10

Malware Config

Targets

- Target
  
  4a2aa6784a8487f05263fdcb823f53953f9ed4c27ae54a9063a01b5fc96e6728
- Size
  
  207KB
- MD5
  
  12dbfc50cc97d92379a166faf2065658
- SHA1
  
  eed68d04f50e07ca2e209a5e7213fa449d8237bc
- SHA256
  
  4a2aa6784a8487f05263fdcb823f53953f9ed4c27ae54a9063a01b5fc96e6728
- SHA512
  
  15bf0d5140a236650f215211fbba1ed8d820697d147863ec625db42bc6286bdc2ad54c633b3fd5bdf8b7a2cc765c9e444dbe548795e92ad6773a7dec5180197e
- SSDEEP
  
  3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1