c61eb16134dbeba408cfb3335a4b93e9f9e6d51e1258f375af11e9a9b247217f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0a5991bc53a6716c4dedb6e16efefc7
Size

54KB
Sample

231222-rq7n6accf3
MD5

c0a5991bc53a6716c4dedb6e16efefc7
SHA1

603ae19e98f097a671c29a62aaea5e8d4a9730e1
SHA256

c61eb16134dbeba408cfb3335a4b93e9f9e6d51e1258f375af11e9a9b247217f
SHA512

153306e0e5fb80b891b123297263e2c11dd135ea480a668ee1b58f67eab0d2f233459e6f5d084ba6cf6e93451fcdcfc676e062264184faaea2ee01a83cca9cf4
SSDEEP

768:EEldXkihXstBnz9aNHi+GgX3IJOQEwZSfGBcnHcGIumAB5E0lXB1qK91UEqQzTGL:JdXkE87nccOtwqsIcGIjAPdrl8fQpCX/

Score

7^/10

Malware Config

Targets

- Target
  
  c0a5991bc53a6716c4dedb6e16efefc7
- Size
  
  54KB
- MD5
  
  c0a5991bc53a6716c4dedb6e16efefc7
- SHA1
  
  603ae19e98f097a671c29a62aaea5e8d4a9730e1
- SHA256
  
  c61eb16134dbeba408cfb3335a4b93e9f9e6d51e1258f375af11e9a9b247217f
- SHA512
  
  153306e0e5fb80b891b123297263e2c11dd135ea480a668ee1b58f67eab0d2f233459e6f5d084ba6cf6e93451fcdcfc676e062264184faaea2ee01a83cca9cf4
- SSDEEP
  
  768:EEldXkihXstBnz9aNHi+GgX3IJOQEwZSfGBcnHcGIumAB5E0lXB1qK91UEqQzTGL:JdXkE87nccOtwqsIcGIjAPdrl8fQpCX/
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2