5e1fad1e14214bce3dd50e290e87ea01168d3a81091e5a7bc8425e8b77a218bc | Triage

Sharing

General

Target

5e1fad1e14214bce3dd50e290e87ea01168d3a81091e5a7bc8425e8b77a218bc
Size

2.0MB
Sample

231012-vdlgyaef95
MD5

fc59c6ba39946ca20b5aba3757723e30
SHA1

a390aca4e1d05431467f3401ff1c8a8a7745440f
SHA256

5e1fad1e14214bce3dd50e290e87ea01168d3a81091e5a7bc8425e8b77a218bc
SHA512

1ff91a9429ed99ff85b6535c3ef3325fb359d308053bdd6f5b169b6f6da6bc83d876822d4251ebdc1405895ccf733983e8b923c6043b78f3a111ad83b499812d
SSDEEP

49152:xWhlkLBfJXAEXmTVUnGpyNuDCWu032AZiiJmoOk:xWhl0BfKE2TV/pyuDCWuM2AZiYm1k

Score

7^/10

Malware Config

Targets

- Target
  
  5e1fad1e14214bce3dd50e290e87ea01168d3a81091e5a7bc8425e8b77a218bc
- Size
  
  2.0MB
- MD5
  
  fc59c6ba39946ca20b5aba3757723e30
- SHA1
  
  a390aca4e1d05431467f3401ff1c8a8a7745440f
- SHA256
  
  5e1fad1e14214bce3dd50e290e87ea01168d3a81091e5a7bc8425e8b77a218bc
- SHA512
  
  1ff91a9429ed99ff85b6535c3ef3325fb359d308053bdd6f5b169b6f6da6bc83d876822d4251ebdc1405895ccf733983e8b923c6043b78f3a111ad83b499812d
- SSDEEP
  
  49152:xWhlkLBfJXAEXmTVUnGpyNuDCWu032AZiiJmoOk:xWhl0BfKE2TV/pyuDCWuM2AZiYm1k
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2