75e391b7f22fa2b6379af5c9b4e6588370ddbf4b2f1e3bce6bc6d31c446b084f | Triage

Sharing

General

Target

16f7a0a349b11398ed2c8b0c1e84a715
Size

42KB
Sample

231225-mff18sfba5
MD5

16f7a0a349b11398ed2c8b0c1e84a715
SHA1

4f8af77baa7c8ab008925a1494a5a034eb3bceef
SHA256

75e391b7f22fa2b6379af5c9b4e6588370ddbf4b2f1e3bce6bc6d31c446b084f
SHA512

72714f47663b8eb15f19f240c4c1625deb5fdb987e2e36056de307a34365aaa6f545280d8c2ecb9a78c01c0e8cc2c7a1b69019cde59c7cfd157ea09ebf963854
SSDEEP

768:rppWsMo8MeEDVWkcQjfiLzP674J52B7X07OJbzdXoiPgtPErj6o1lcKe:rruoMLiaLzY4J247ONdfgw6qlj

Score

7^/10

Malware Config

Targets

- Target
  
  16f7a0a349b11398ed2c8b0c1e84a715
- Size
  
  42KB
- MD5
  
  16f7a0a349b11398ed2c8b0c1e84a715
- SHA1
  
  4f8af77baa7c8ab008925a1494a5a034eb3bceef
- SHA256
  
  75e391b7f22fa2b6379af5c9b4e6588370ddbf4b2f1e3bce6bc6d31c446b084f
- SHA512
  
  72714f47663b8eb15f19f240c4c1625deb5fdb987e2e36056de307a34365aaa6f545280d8c2ecb9a78c01c0e8cc2c7a1b69019cde59c7cfd157ea09ebf963854
- SSDEEP
  
  768:rppWsMo8MeEDVWkcQjfiLzP674J52B7X07OJbzdXoiPgtPErj6o1lcKe:rruoMLiaLzY4J247ONdfgw6qlj
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2