5b549a718d3f01a3566830660c5bb433a59ae2524bfc7be0d9ab2b43a618c6e7 | Triage

Sharing

General

Target

0e6d064a2367fc710df5d7783aa9e918
Size

237KB
Sample

231225-h7m7eabfcm
MD5

0e6d064a2367fc710df5d7783aa9e918
SHA1

9fd67948f04435bf7a87dfc84c5590b36a6d9f1d
SHA256

5b549a718d3f01a3566830660c5bb433a59ae2524bfc7be0d9ab2b43a618c6e7
SHA512

94aba068fc77dcfdcfd0b4f3c5e64943cb29b75f21b5b9100aa5e4b7964ee89aca38e5b5aa0d6b80ee2565b142be6187c976b8a63f21f41a1a642205f818a5a4
SSDEEP

3072:HwxVMhOC/dTDbq91+mno3t4QZQ3rbTn7kknpLWFccNWwN203C0qEf81ePBxhYNZa:HTfFDbRnOTrbTZpu1N2FhU81ALhYPLzS

Score

7^/10

Malware Config

Targets

- Target
  
  0e6d064a2367fc710df5d7783aa9e918
- Size
  
  237KB
- MD5
  
  0e6d064a2367fc710df5d7783aa9e918
- SHA1
  
  9fd67948f04435bf7a87dfc84c5590b36a6d9f1d
- SHA256
  
  5b549a718d3f01a3566830660c5bb433a59ae2524bfc7be0d9ab2b43a618c6e7
- SHA512
  
  94aba068fc77dcfdcfd0b4f3c5e64943cb29b75f21b5b9100aa5e4b7964ee89aca38e5b5aa0d6b80ee2565b142be6187c976b8a63f21f41a1a642205f818a5a4
- SSDEEP
  
  3072:HwxVMhOC/dTDbq91+mno3t4QZQ3rbTn7kknpLWFccNWwN203C0qEf81ePBxhYNZa:HTfFDbRnOTrbTZpu1N2FhU81ALhYPLzS
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2