6f7939f18fc4087a3ba89638d15001370c6c35de1f789b57b9714c5304cd3c51 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f7939f18fc4087a3ba89638d15001370c6c35de1f789b57b9714c5304cd3c51
Size

1.6MB
Sample

231012-nrwrhafh4y
MD5

aae3b01773bfc192c8704e43bef18877
SHA1

d5dcb839d48ab4339302a7b339feffdba8dce0ea
SHA256

6f7939f18fc4087a3ba89638d15001370c6c35de1f789b57b9714c5304cd3c51
SHA512

2bf4ee135ace7b85c2caa38bec37fbc0b1160a51b246369ee93e7f375a9b29b17183fe5d664ad5050bd7d36d861c4c7083628cd0d441a88c58acd71b137c64c1
SSDEEP

49152:CvxfXThHukuTuPTwCkLCo8TAWPsawzIpBlg:Cvx5RuamCo8pPOzS2

Score

7^/10

Malware Config

Targets

- Target
  
  6f7939f18fc4087a3ba89638d15001370c6c35de1f789b57b9714c5304cd3c51
- Size
  
  1.6MB
- MD5
  
  aae3b01773bfc192c8704e43bef18877
- SHA1
  
  d5dcb839d48ab4339302a7b339feffdba8dce0ea
- SHA256
  
  6f7939f18fc4087a3ba89638d15001370c6c35de1f789b57b9714c5304cd3c51
- SHA512
  
  2bf4ee135ace7b85c2caa38bec37fbc0b1160a51b246369ee93e7f375a9b29b17183fe5d664ad5050bd7d36d861c4c7083628cd0d441a88c58acd71b137c64c1
- SSDEEP
  
  49152:CvxfXThHukuTuPTwCkLCo8TAWPsawzIpBlg:Cvx5RuamCo8pPOzS2
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2