2299ee6984c3aeec483a4be48e427e3dec27fee52137d8b2e0cca4eca8c4e121 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

437d30ded20280ec346c43e7959980f9
Size

471KB
Sample

231225-3j4jpsgebj
MD5

437d30ded20280ec346c43e7959980f9
SHA1

2c2af78fe1cb982e2adbc6208f94fcfe4bf33974
SHA256

2299ee6984c3aeec483a4be48e427e3dec27fee52137d8b2e0cca4eca8c4e121
SHA512

e3af3f795e6bf4a832d49dce8f13734eb20431f58a87a69821712530e53b7496066d3f841fc01a31df4db8a6703fbe116c943b390aba73af1df2e1188af935c2
SSDEEP

6144:amsyd7BspOWZ+Stxo3Gc2uqy3gu88mWCMpCRWFf2Kj+m+6XYYY:mpO3StxwGc2c3tfmfsCRA22+m+8s

Score

7^/10

Malware Config

Targets

- Target
  
  437d30ded20280ec346c43e7959980f9
- Size
  
  471KB
- MD5
  
  437d30ded20280ec346c43e7959980f9
- SHA1
  
  2c2af78fe1cb982e2adbc6208f94fcfe4bf33974
- SHA256
  
  2299ee6984c3aeec483a4be48e427e3dec27fee52137d8b2e0cca4eca8c4e121
- SHA512
  
  e3af3f795e6bf4a832d49dce8f13734eb20431f58a87a69821712530e53b7496066d3f841fc01a31df4db8a6703fbe116c943b390aba73af1df2e1188af935c2
- SSDEEP
  
  6144:amsyd7BspOWZ+Stxo3Gc2uqy3gu88mWCMpCRWFf2Kj+m+6XYYY:mpO3StxwGc2c3tfmfsCRA22+m+8s
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2