87c26899760ef56968bbbd41256c412f070d4012d6a98bc845e86ffc957b636d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87c26899760ef56968bbbd41256c412f070d4012d6a98bc845e86ffc957b636d
Size

208KB
Sample

230608-r2bqvsgb27
MD5

4184dc8bce5a0c8589af8fe2a50dec8d
SHA1

cf9bb6420be659276b657d1048a8314cab6fa602
SHA256

87c26899760ef56968bbbd41256c412f070d4012d6a98bc845e86ffc957b636d
SHA512

601197b5542fc438041588d709171b01b0fd3b653d0711c4ba284a7e37983c6507e02ab691af93f45a4a87bd6ad88430e1ef987b385ecc424a6524302a0d69b0
SSDEEP

3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score

7^/10

Malware Config

Targets

- Target
  
  87c26899760ef56968bbbd41256c412f070d4012d6a98bc845e86ffc957b636d
- Size
  
  208KB
- MD5
  
  4184dc8bce5a0c8589af8fe2a50dec8d
- SHA1
  
  cf9bb6420be659276b657d1048a8314cab6fa602
- SHA256
  
  87c26899760ef56968bbbd41256c412f070d4012d6a98bc845e86ffc957b636d
- SHA512
  
  601197b5542fc438041588d709171b01b0fd3b653d0711c4ba284a7e37983c6507e02ab691af93f45a4a87bd6ad88430e1ef987b385ecc424a6524302a0d69b0
- SSDEEP
  
  3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1