2496c584b7fbdbd2fabb3aec3c38dbeae1c58bc2cdba76b5b654748f555c1530 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2496c584b7fbdbd2fabb3aec3c38dbeae1c58bc2cdba76b5b654748f555c1530
Size

1.6MB
Sample

231012-nsjhkaaa63
MD5

638ca8564eb961991d8500eddd016e81
SHA1

6d2d10a01ca76239c3af8e63c22bbe8dc7b1f483
SHA256

2496c584b7fbdbd2fabb3aec3c38dbeae1c58bc2cdba76b5b654748f555c1530
SHA512

e591dd61512d56ac4ceb991fde58ed1f3f43a0289cb03d8ed4296a16d61e2751c44b3e6ab555484b2394dbe14a674021190eece8fb526cc45e53521a82ef90f0
SSDEEP

24576:CGn8xjmViXYMnnbmTh2RR/QlicilNCTnkUYYeidUTTtFWMGjAMCE59T17yPVKsog:CvxfXTnF6ic2AdkTqAMh6KvaR

Score

7^/10

Malware Config

Targets

- Target
  
  2496c584b7fbdbd2fabb3aec3c38dbeae1c58bc2cdba76b5b654748f555c1530
- Size
  
  1.6MB
- MD5
  
  638ca8564eb961991d8500eddd016e81
- SHA1
  
  6d2d10a01ca76239c3af8e63c22bbe8dc7b1f483
- SHA256
  
  2496c584b7fbdbd2fabb3aec3c38dbeae1c58bc2cdba76b5b654748f555c1530
- SHA512
  
  e591dd61512d56ac4ceb991fde58ed1f3f43a0289cb03d8ed4296a16d61e2751c44b3e6ab555484b2394dbe14a674021190eece8fb526cc45e53521a82ef90f0
- SSDEEP
  
  24576:CGn8xjmViXYMnnbmTh2RR/QlicilNCTnkUYYeidUTTtFWMGjAMCE59T17yPVKsog:CvxfXTnF6ic2AdkTqAMh6KvaR
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2