98ca7a5fb785f0eb0f000782908a258b42bd7f27cc28d8daba52bad9236efa13 | Triage

Sharing

General

Target

028a7c3103e13888ae9801115c4d4490
Size

240KB
Sample

231229-ytrwfabhb4
MD5

028a7c3103e13888ae9801115c4d4490
SHA1

d14a80a11ab37dee3e8ad07b76811ec5b13bc44f
SHA256

98ca7a5fb785f0eb0f000782908a258b42bd7f27cc28d8daba52bad9236efa13
SHA512

2b26744b5d7455757f5575922d21f07cafc8ff1fe68a6c4ae7154a0354b59d0ef09c14590ad89c4af292e1b28814f977244f39fee769a915f250df914c718c7b
SSDEEP

3072:SVHgCc4xGvbwcU9KQ2BBAHmaPxlVozb5EC:TCc4xGxWKQ2BonxS

Score

7^/10

Malware Config

Targets

- Target
  
  028a7c3103e13888ae9801115c4d4490
- Size
  
  240KB
- MD5
  
  028a7c3103e13888ae9801115c4d4490
- SHA1
  
  d14a80a11ab37dee3e8ad07b76811ec5b13bc44f
- SHA256
  
  98ca7a5fb785f0eb0f000782908a258b42bd7f27cc28d8daba52bad9236efa13
- SHA512
  
  2b26744b5d7455757f5575922d21f07cafc8ff1fe68a6c4ae7154a0354b59d0ef09c14590ad89c4af292e1b28814f977244f39fee769a915f250df914c718c7b
- SSDEEP
  
  3072:SVHgCc4xGvbwcU9KQ2BBAHmaPxlVozb5EC:TCc4xGxWKQ2BonxS
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2