ddf900ccf34e5fd90f192454101490e3bff0e45158879bbf6ba8de2e5f737564 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddf900ccf34e5fd90f192454101490e3bff0e45158879bbf6ba8de2e5f737564
Size

208KB
Sample

230608-lvn5qaed7y
MD5

abe07697b0e01fa6f5f74face781f94b
SHA1

12652e653fc2a09b8cd4c362ac8dd12c792b3099
SHA256

ddf900ccf34e5fd90f192454101490e3bff0e45158879bbf6ba8de2e5f737564
SHA512

1b6bcb0b615e161bfe8f28d48f9c0a92e7d51b946028e6124018de1e9b722c3a3778ae585d4f9edfbbfb8fb1aeb356fa47ea3603864bf4400a68de6506dfb915
SSDEEP

3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score

7^/10

Malware Config

Targets

- Target
  
  ddf900ccf34e5fd90f192454101490e3bff0e45158879bbf6ba8de2e5f737564
- Size
  
  208KB
- MD5
  
  abe07697b0e01fa6f5f74face781f94b
- SHA1
  
  12652e653fc2a09b8cd4c362ac8dd12c792b3099
- SHA256
  
  ddf900ccf34e5fd90f192454101490e3bff0e45158879bbf6ba8de2e5f737564
- SHA512
  
  1b6bcb0b615e161bfe8f28d48f9c0a92e7d51b946028e6124018de1e9b722c3a3778ae585d4f9edfbbfb8fb1aeb356fa47ea3603864bf4400a68de6506dfb915
- SSDEEP
  
  3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1