6d5e4e3425d008029cbe43d358bcf1e290d0a70d613447ee13eebe14c1ee9b24 | Triage

Sharing

General

Target

6d5e4e3425d008029cbe43d358bcf1e290d0a70d613447ee13eebe14c1ee9b24
Size

207KB
Sample

230608-fvyfhach9v
MD5

ce529a6c757f19effba8a0d698bd0335
SHA1

19e4f4d9fc22b1b231454cb6e891b4fc72f2a2c3
SHA256

6d5e4e3425d008029cbe43d358bcf1e290d0a70d613447ee13eebe14c1ee9b24
SHA512

346f8b538d9479391769a257407a0062eee9bb516a4b0cb1e1e89a296aa7878e157b99a51578f6473cc220e1b89d08ae838d7d9312404e1c4cd600f871989635
SSDEEP

3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score

7^/10

Malware Config

Targets

- Target
  
  6d5e4e3425d008029cbe43d358bcf1e290d0a70d613447ee13eebe14c1ee9b24
- Size
  
  207KB
- MD5
  
  ce529a6c757f19effba8a0d698bd0335
- SHA1
  
  19e4f4d9fc22b1b231454cb6e891b4fc72f2a2c3
- SHA256
  
  6d5e4e3425d008029cbe43d358bcf1e290d0a70d613447ee13eebe14c1ee9b24
- SHA512
  
  346f8b538d9479391769a257407a0062eee9bb516a4b0cb1e1e89a296aa7878e157b99a51578f6473cc220e1b89d08ae838d7d9312404e1c4cd600f871989635
- SSDEEP
  
  3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1