0bb58f7faefbecd371678e0f349eb3730d5d6f3dbead43c84e4bf18dddc2a76d | Triage

Sharing

General

Target

0bb58f7faefbecd371678e0f349eb3730d5d6f3dbead43c84e4bf18dddc2a76d
Size

1.8MB
Sample

231012-rh56csff77
MD5

8b5937861b7cae2b0ed67954876a2f36
SHA1

d50360ecc36c057fea9945653cfa21c75e8edd70
SHA256

0bb58f7faefbecd371678e0f349eb3730d5d6f3dbead43c84e4bf18dddc2a76d
SHA512

f01fe493d293dc0a7770381efdf00e0ed2754d367ea90a7dc7dbcaedb463207c3abcb92651e2c3c5f4726aae7d3a7bf88899798721273cf060fd7ef379aabad7
SSDEEP

49152:wWhr59BfJXAE+UKuPzCClp/XbRD3mCZBeHtTU:wWhrPBfKEBPzxPbR7pGlU

Score

7^/10

Malware Config

Targets

- Target
  
  0bb58f7faefbecd371678e0f349eb3730d5d6f3dbead43c84e4bf18dddc2a76d
- Size
  
  1.8MB
- MD5
  
  8b5937861b7cae2b0ed67954876a2f36
- SHA1
  
  d50360ecc36c057fea9945653cfa21c75e8edd70
- SHA256
  
  0bb58f7faefbecd371678e0f349eb3730d5d6f3dbead43c84e4bf18dddc2a76d
- SHA512
  
  f01fe493d293dc0a7770381efdf00e0ed2754d367ea90a7dc7dbcaedb463207c3abcb92651e2c3c5f4726aae7d3a7bf88899798721273cf060fd7ef379aabad7
- SSDEEP
  
  49152:wWhr59BfJXAE+UKuPzCClp/XbRD3mCZBeHtTU:wWhrPBfKEBPzxPbR7pGlU
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2