48e12867b2a256b2676efd76f7672bb5a3b111a0304157b98c6c86c7d76b2d5e | Triage

Sharing

General

Target

03577bf55d4aefea88aaa1eed68e3a19
Size

181KB
Sample

231224-sngwdscedj
MD5

03577bf55d4aefea88aaa1eed68e3a19
SHA1

b993c81ba18ced9d41fc59ac647bea489b2e15f5
SHA256

48e12867b2a256b2676efd76f7672bb5a3b111a0304157b98c6c86c7d76b2d5e
SHA512

b9997d745b61f8e0e240f6282976bc4897fbcd969be45753d8c9ea0a820f48d75992923d98387f305b2505882e9a58547ff3b18e7d53ca7bd1415f0b1b01f155
SSDEEP

3072:1d9xR3G2BZMbBLBaYw0coLujNHIHaTTg4atGleXOMJrbB60FT+bBNXXl:1d93ZBZMbqYgomHIH3eMxF8BNXXl

Score

7^/10

Malware Config

Targets

- Target
  
  03577bf55d4aefea88aaa1eed68e3a19
- Size
  
  181KB
- MD5
  
  03577bf55d4aefea88aaa1eed68e3a19
- SHA1
  
  b993c81ba18ced9d41fc59ac647bea489b2e15f5
- SHA256
  
  48e12867b2a256b2676efd76f7672bb5a3b111a0304157b98c6c86c7d76b2d5e
- SHA512
  
  b9997d745b61f8e0e240f6282976bc4897fbcd969be45753d8c9ea0a820f48d75992923d98387f305b2505882e9a58547ff3b18e7d53ca7bd1415f0b1b01f155
- SSDEEP
  
  3072:1d9xR3G2BZMbBLBaYw0coLujNHIHaTTg4atGleXOMJrbB60FT+bBNXXl:1d93ZBZMbqYgomHIH3eMxF8BNXXl
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2