34de83833d113611caaa8b872bd643a30c1ad3e893b4bbcc4a5bec5ce9e7734a | Triage

Sharing

General

Target

34de83833d113611caaa8b872bd643a30c1ad3e893b4bbcc4a5bec5ce9e7734a
Size

363KB
Sample

231006-l5hqpacf88
MD5

56bdfddf9756ac62d86bac3974224380
SHA1

81e20c225038a691816bc6e2239d3a68fc90ecdb
SHA256

34de83833d113611caaa8b872bd643a30c1ad3e893b4bbcc4a5bec5ce9e7734a
SHA512

c7a813a5c6a754b66afb991e81327f022cc27f969001ec0ddd4c1ee4309cba741a6dc287312c79e98f368fbf1bf1fd9bc747d71e70a2320b8232603f769d368b
SSDEEP

6144:pkYnm9VlSI5GvGASVJh6IFQodMJQpe/o:Bm9VIiGuASVJh6IFL

Score

8^/10

Malware Config

Targets

- Target
  
  34de83833d113611caaa8b872bd643a30c1ad3e893b4bbcc4a5bec5ce9e7734a
- Size
  
  363KB
- MD5
  
  56bdfddf9756ac62d86bac3974224380
- SHA1
  
  81e20c225038a691816bc6e2239d3a68fc90ecdb
- SHA256
  
  34de83833d113611caaa8b872bd643a30c1ad3e893b4bbcc4a5bec5ce9e7734a
- SHA512
  
  c7a813a5c6a754b66afb991e81327f022cc27f969001ec0ddd4c1ee4309cba741a6dc287312c79e98f368fbf1bf1fd9bc747d71e70a2320b8232603f769d368b
- SSDEEP
  
  6144:pkYnm9VlSI5GvGASVJh6IFQodMJQpe/o:Bm9VIiGuASVJh6IFL
Score

8^/10
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1