b60116ed75cb9e7e17129286dc4a8d0e36fe1acc6fbc53633db26704a58839e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b60116ed75cb9e7e17129286dc4a8d0e36fe1acc6fbc53633db26704a58839e3
Size

11.4MB
Sample

231006-n24vvsba2s
MD5

f00256399ca8134ab3e0945d0c7eb73d
SHA1

0017967dc1b16a8888823c483e1dd76e9489b0d5
SHA256

b60116ed75cb9e7e17129286dc4a8d0e36fe1acc6fbc53633db26704a58839e3
SHA512

cf0562c001a38c3c2462fd3f42feafe72339fa4d39b69077a84cbdc27812ad101b49d3b7be846fb5a0a931f15ee5daf6a125f5a3ea1951ec9ddf8e88115658dd
SSDEEP

196608:6vVoFxJefcPdZ2hyRLY9u7EFtXn306N2k7oIOD0Y/IIgz4KqEvjW9y0djhb67sgN:TxVZtLUuIX3hNvJ601IgzqEC9P3PMJ

Score

7^/10

Malware Config

Targets

- Target
  
  b60116ed75cb9e7e17129286dc4a8d0e36fe1acc6fbc53633db26704a58839e3
- Size
  
  11.4MB
- MD5
  
  f00256399ca8134ab3e0945d0c7eb73d
- SHA1
  
  0017967dc1b16a8888823c483e1dd76e9489b0d5
- SHA256
  
  b60116ed75cb9e7e17129286dc4a8d0e36fe1acc6fbc53633db26704a58839e3
- SHA512
  
  cf0562c001a38c3c2462fd3f42feafe72339fa4d39b69077a84cbdc27812ad101b49d3b7be846fb5a0a931f15ee5daf6a125f5a3ea1951ec9ddf8e88115658dd
- SSDEEP
  
  196608:6vVoFxJefcPdZ2hyRLY9u7EFtXn306N2k7oIOD0Y/IIgz4KqEvjW9y0djhb67sgN:TxVZtLUuIX3hNvJ601IgzqEC9P3PMJ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2