3c52b8d7e0ac20f51235836a1511f2306c412fb00e3d9d186a30bd536a92e454 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c52b8d7e0ac20f51235836a1511f2306c412fb00e3d9d186a30bd536a92e454
Size

15.7MB
Sample

230831-1xjeksba53
MD5

a31877a7528103a17b99cd962f58d6c9
SHA1

a367a91e7fe2efa095d4f6c98ff9f9935bad64da
SHA256

3c52b8d7e0ac20f51235836a1511f2306c412fb00e3d9d186a30bd536a92e454
SHA512

9b7feb169371346c0db1dc51e692a295fff5a02b1f3e4d55afd52cb158d5e843957d6af2752475a2221f553d814b60ea06f6b7066d6428e2653b74386bdb2057
SSDEEP

393216:k3gAJ3m8cM6HmMbtd0R994bWS6ntwD0y3klXW8qYKLRs6:rAo8imMbtd0TpFqh0lXdqYKLRs

Score

7^/10

Malware Config

Targets

- Target
  
  3c52b8d7e0ac20f51235836a1511f2306c412fb00e3d9d186a30bd536a92e454
- Size
  
  15.7MB
- MD5
  
  a31877a7528103a17b99cd962f58d6c9
- SHA1
  
  a367a91e7fe2efa095d4f6c98ff9f9935bad64da
- SHA256
  
  3c52b8d7e0ac20f51235836a1511f2306c412fb00e3d9d186a30bd536a92e454
- SHA512
  
  9b7feb169371346c0db1dc51e692a295fff5a02b1f3e4d55afd52cb158d5e843957d6af2752475a2221f553d814b60ea06f6b7066d6428e2653b74386bdb2057
- SSDEEP
  
  393216:k3gAJ3m8cM6HmMbtd0R994bWS6ntwD0y3klXW8qYKLRs6:rAo8imMbtd0TpFqh0lXdqYKLRs
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2