73f4006f8f42d1c5c4644c02513082b5e0c5e15465c667c8de0e2d4a652b1dc4 | Triage

Sharing

General

Target

5853abf213e5cdaeae074d9dbbf6098b
Size

226KB
Sample

231226-gpydzscgdr
MD5

5853abf213e5cdaeae074d9dbbf6098b
SHA1

d4c6d38e5ad574c4e07b33b3c342be45726af04d
SHA256

73f4006f8f42d1c5c4644c02513082b5e0c5e15465c667c8de0e2d4a652b1dc4
SHA512

2ac3eb5ff36c1dbf2d8a5ec7543ff31449f0da462cb35576a2ab0bb73ae79feac1d91fb3c6f92b2e58cb962d4bcfa0fe8bde16229e199709d16a4eadc47ff691
SSDEEP

6144:C1QLJQL0gTTuQ0quhsf7KjMdcornRZAArCgLADMJ82PeAUyFd:x2oITuQ0qugKjzEfbrCnm82PevS

Score

7^/10

Malware Config

Targets

- Target
  
  5853abf213e5cdaeae074d9dbbf6098b
- Size
  
  226KB
- MD5
  
  5853abf213e5cdaeae074d9dbbf6098b
- SHA1
  
  d4c6d38e5ad574c4e07b33b3c342be45726af04d
- SHA256
  
  73f4006f8f42d1c5c4644c02513082b5e0c5e15465c667c8de0e2d4a652b1dc4
- SHA512
  
  2ac3eb5ff36c1dbf2d8a5ec7543ff31449f0da462cb35576a2ab0bb73ae79feac1d91fb3c6f92b2e58cb962d4bcfa0fe8bde16229e199709d16a4eadc47ff691
- SSDEEP
  
  6144:C1QLJQL0gTTuQ0quhsf7KjMdcornRZAArCgLADMJ82PeAUyFd:x2oITuQ0qugKjzEfbrCnm82PevS
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2