1f3a3650639db4890a28283c7263d81e9b0aef48ebba7106acb76e76a2cf1b9b | Triage

Sharing

General

Target

1f3a3650639db4890a28283c7263d81e9b0aef48ebba7106acb76e76a2cf1b9b
Size

1.8MB
Sample

230609-zgtd6sde24
MD5

4f439160f7c725e4d8cc4869f9e36041
SHA1

5e6a902fe8b8245faf7e49347bd04ae2f6826fd6
SHA256

1f3a3650639db4890a28283c7263d81e9b0aef48ebba7106acb76e76a2cf1b9b
SHA512

0ee9a6f580bfd1dc794259c2e8be74fe5fda785cc9600bc93b22344d42372273e7937fe99dc37efcdd007ad98c58d04a0d2391dafad45cae7abce13e68faed34
SSDEEP

49152:8FwiHeiOp3Kq1qwDJEeB+thrdsWPltnZIV7y0x4AbPbmcdJ:8FwfptfDqecth/l1sPx4AbPb77

Score

7^/10

Malware Config

Targets

- Target
  
  1f3a3650639db4890a28283c7263d81e9b0aef48ebba7106acb76e76a2cf1b9b
- Size
  
  1.8MB
- MD5
  
  4f439160f7c725e4d8cc4869f9e36041
- SHA1
  
  5e6a902fe8b8245faf7e49347bd04ae2f6826fd6
- SHA256
  
  1f3a3650639db4890a28283c7263d81e9b0aef48ebba7106acb76e76a2cf1b9b
- SHA512
  
  0ee9a6f580bfd1dc794259c2e8be74fe5fda785cc9600bc93b22344d42372273e7937fe99dc37efcdd007ad98c58d04a0d2391dafad45cae7abce13e68faed34
- SSDEEP
  
  49152:8FwiHeiOp3Kq1qwDJEeB+thrdsWPltnZIV7y0x4AbPbmcdJ:8FwfptfDqecth/l1sPx4AbPb77
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2