29c3c6baba30c5cc7cdb1094cf8138648311b087646244b5a36d7fb155a41437 | Triage

Sharing

General

Target

29c3c6baba30c5cc7cdb1094cf8138648311b087646244b5a36d7fb155a41437
Size

718KB
Sample

231013-p9y51shh5s
MD5

15f3471b52d91f38c4f3b61abb8e5d0c
SHA1

0978d928a8f09ef5b04fbb876992001eb15b41ac
SHA256

29c3c6baba30c5cc7cdb1094cf8138648311b087646244b5a36d7fb155a41437
SHA512

153cb6769b85d568b5661b1ddbcc0aea76cc5672ca2056efe9ce958dbf49937b0ec65942339cc28292c47819c7b521c878dd6a58a4bece8ebb630f5ae2ca090c
SSDEEP

12288:pcafdijU7g65UlfpnIq+e5+CbcV4UqCN1uRGoWXKMl9BG1AEE5bMHViJ9GrSi2rA:+afYjKgjIpeYucV4Uq8ujWX7rBG1Q5bE

Score

7^/10

Malware Config

Targets

- Target
  
  29c3c6baba30c5cc7cdb1094cf8138648311b087646244b5a36d7fb155a41437
- Size
  
  718KB
- MD5
  
  15f3471b52d91f38c4f3b61abb8e5d0c
- SHA1
  
  0978d928a8f09ef5b04fbb876992001eb15b41ac
- SHA256
  
  29c3c6baba30c5cc7cdb1094cf8138648311b087646244b5a36d7fb155a41437
- SHA512
  
  153cb6769b85d568b5661b1ddbcc0aea76cc5672ca2056efe9ce958dbf49937b0ec65942339cc28292c47819c7b521c878dd6a58a4bece8ebb630f5ae2ca090c
- SSDEEP
  
  12288:pcafdijU7g65UlfpnIq+e5+CbcV4UqCN1uRGoWXKMl9BG1AEE5bMHViJ9GrSi2rA:+afYjKgjIpeYucV4Uq8ujWX7rBG1Q5bE
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2