20ce6202ddaab070949e8c4253fc18c3dbe5962264205c3210227aad6a97730d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39465192fd7d4d85ce7c16b309cbd78a
Size

457KB
Sample

231225-ykmkcsfdg3
MD5

39465192fd7d4d85ce7c16b309cbd78a
SHA1

20f23a36cfcd71781c07c295c8cc37b591bf6260
SHA256

20ce6202ddaab070949e8c4253fc18c3dbe5962264205c3210227aad6a97730d
SHA512

0fd1209021b4b6801bb39d24493ac921d7583bbd86565cef71484a76bfbf80c0ca2c41c125ac4ea1d51c03954f201f05e5b4bc410b07e73c44c05dad9b9c6051
SSDEEP

12288:+zy6rRxEDAszYy/MSGFWHuNuuhuoqGdGSbYX17r7tK1Q:V6rT8cKu1dtcXBJkQ

Score

7^/10

Malware Config

Targets

- Target
  
  39465192fd7d4d85ce7c16b309cbd78a
- Size
  
  457KB
- MD5
  
  39465192fd7d4d85ce7c16b309cbd78a
- SHA1
  
  20f23a36cfcd71781c07c295c8cc37b591bf6260
- SHA256
  
  20ce6202ddaab070949e8c4253fc18c3dbe5962264205c3210227aad6a97730d
- SHA512
  
  0fd1209021b4b6801bb39d24493ac921d7583bbd86565cef71484a76bfbf80c0ca2c41c125ac4ea1d51c03954f201f05e5b4bc410b07e73c44c05dad9b9c6051
- SSDEEP
  
  12288:+zy6rRxEDAszYy/MSGFWHuNuuhuoqGdGSbYX17r7tK1Q:V6rT8cKu1dtcXBJkQ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2