ea24d8d1452cada7300a8bc27efd80e794fac51cbc3bb3e0e7a761e14249db27 | Triage

Sharing

General

Target

0fb465def9d2ae681b083256ee6fc788
Size

14KB
Sample

231219-m6f4xshchj
MD5

0fb465def9d2ae681b083256ee6fc788
SHA1

05e8a73c0eece595e854920e7478c9e67c21c3fd
SHA256

ea24d8d1452cada7300a8bc27efd80e794fac51cbc3bb3e0e7a761e14249db27
SHA512

9b0ee2578fede364c898595ae7e5a85be85db83e1bced7155a753e284dc7e542529965154b4b2715c7fe086216fef335a06276037266d16a1a4dcf48f4a71516
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4Q:hDXWipuE+K3/SSHgxml

Score

7^/10

Malware Config

Targets

- Target
  
  0fb465def9d2ae681b083256ee6fc788
- Size
  
  14KB
- MD5
  
  0fb465def9d2ae681b083256ee6fc788
- SHA1
  
  05e8a73c0eece595e854920e7478c9e67c21c3fd
- SHA256
  
  ea24d8d1452cada7300a8bc27efd80e794fac51cbc3bb3e0e7a761e14249db27
- SHA512
  
  9b0ee2578fede364c898595ae7e5a85be85db83e1bced7155a753e284dc7e542529965154b4b2715c7fe086216fef335a06276037266d16a1a4dcf48f4a71516
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4Q:hDXWipuE+K3/SSHgxml
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2