0a8b7e403b6daecb056e144afdfde21da65db1f5d8d7390cdbdc56e785a3b64d | Triage

Sharing

General

Target

0a8b7e403b6daecb056e144afdfde21da65db1f5d8d7390cdbdc56e785a3b64d
Size

1.1MB
Sample

231115-d8yx3sbe68
MD5

5a196b7faed329e26cfc65be04f2f9ac
SHA1

dd8be232174b3eb1787cffadffdd6feb3af28734
SHA256

0a8b7e403b6daecb056e144afdfde21da65db1f5d8d7390cdbdc56e785a3b64d
SHA512

5e05652713abcc79f298d37ad74475030192bd466e357c89cc89d099a28c67b620ad48fb74c133ae7a3e31f99cdaf1ee2363097ae79ed90edbc62ce76580b498
SSDEEP

24576:gRW3N/0f/oAPoRBchI5anfOlAUAi1K6oElG4lBujFAvCyRO:g5ApamAUAQ/lG4lBmFAvZO

Score

7^/10

Malware Config

Targets

- Target
  
  0a8b7e403b6daecb056e144afdfde21da65db1f5d8d7390cdbdc56e785a3b64d
- Size
  
  1.1MB
- MD5
  
  5a196b7faed329e26cfc65be04f2f9ac
- SHA1
  
  dd8be232174b3eb1787cffadffdd6feb3af28734
- SHA256
  
  0a8b7e403b6daecb056e144afdfde21da65db1f5d8d7390cdbdc56e785a3b64d
- SHA512
  
  5e05652713abcc79f298d37ad74475030192bd466e357c89cc89d099a28c67b620ad48fb74c133ae7a3e31f99cdaf1ee2363097ae79ed90edbc62ce76580b498
- SSDEEP
  
  24576:gRW3N/0f/oAPoRBchI5anfOlAUAi1K6oElG4lBujFAvCyRO:g5ApamAUAQ/lG4lBmFAvZO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2