e05273d47b94ed4314394c0f861d1b91d345656aa5ba8fb4efc528f2e1ab57d6 | Triage

Sharing

General

Target

6c67bdec0044352c877a585b4a4f5774
Size

3.1MB
Sample

231226-n292wafger
MD5

6c67bdec0044352c877a585b4a4f5774
SHA1

36ebc891e438fb2c65b00f61fbccf6b49ef3659f
SHA256

e05273d47b94ed4314394c0f861d1b91d345656aa5ba8fb4efc528f2e1ab57d6
SHA512

dfcf90eba7f4048603b4d3cd4404692c3703a7c1fddc39375ad311de0ee80cc61b093fe0bed66c423f363018cc341dfabf44fed60046eeb2ff75df3fed9937b7
SSDEEP

49152:O9fthFA9eOU75nADnIIXvqpY2qyL8vKBhRYBXIlJBQamuiQVlkH1b8LUVW:otvO+Vr2vqRL8iBzY6lTCVIlk8IW

Score

7^/10

Malware Config

Targets

- Target
  
  6c67bdec0044352c877a585b4a4f5774
- Size
  
  3.1MB
- MD5
  
  6c67bdec0044352c877a585b4a4f5774
- SHA1
  
  36ebc891e438fb2c65b00f61fbccf6b49ef3659f
- SHA256
  
  e05273d47b94ed4314394c0f861d1b91d345656aa5ba8fb4efc528f2e1ab57d6
- SHA512
  
  dfcf90eba7f4048603b4d3cd4404692c3703a7c1fddc39375ad311de0ee80cc61b093fe0bed66c423f363018cc341dfabf44fed60046eeb2ff75df3fed9937b7
- SSDEEP
  
  49152:O9fthFA9eOU75nADnIIXvqpY2qyL8vKBhRYBXIlJBQamuiQVlkH1b8LUVW:otvO+Vr2vqRL8iBzY6lTCVIlk8IW
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2