6b3afc8888d559534ab766b12d0306bfd9f9bab80f37714024de3667a7bd5655 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f75f869c63aecf8e6385db4cf623f41
Size

296KB
Sample

231225-vlzpjadbf2
MD5

2f75f869c63aecf8e6385db4cf623f41
SHA1

9b72022b48ec607c7a07c4cc1dd0a941cc0c4891
SHA256

6b3afc8888d559534ab766b12d0306bfd9f9bab80f37714024de3667a7bd5655
SHA512

8893dcf5cf80667eb889bfb5ddec87eec0d6317f6a596e75b0ad5dca903f0b52c392d84e96e7a8280ad663df0f09591ea575cb1a489953f03e66f7c509333968
SSDEEP

6144:8d93ZBZMbqYgomHmXJiOZ9dvBq2lEetbjrgU0NriKANefMZjA7KtGn:8r3ZBIRQOfdvM27RqiKk7p9O

Score

7^/10

Malware Config

Targets

- Target
  
  2f75f869c63aecf8e6385db4cf623f41
- Size
  
  296KB
- MD5
  
  2f75f869c63aecf8e6385db4cf623f41
- SHA1
  
  9b72022b48ec607c7a07c4cc1dd0a941cc0c4891
- SHA256
  
  6b3afc8888d559534ab766b12d0306bfd9f9bab80f37714024de3667a7bd5655
- SHA512
  
  8893dcf5cf80667eb889bfb5ddec87eec0d6317f6a596e75b0ad5dca903f0b52c392d84e96e7a8280ad663df0f09591ea575cb1a489953f03e66f7c509333968
- SSDEEP
  
  6144:8d93ZBZMbqYgomHmXJiOZ9dvBq2lEetbjrgU0NriKANefMZjA7KtGn:8r3ZBIRQOfdvM27RqiKk7p9O
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2