0f1c34b5082c02ac4ddbb26a0fb3840efbf54642303ff039a638c87c3e59fe79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b156962ad317fe1a1089b2dd54e9407
Size

132KB
Sample

231230-cjjlesbcc8
MD5

0b156962ad317fe1a1089b2dd54e9407
SHA1

aec6b6813587ac1d4508a2995ad666fe96af2471
SHA256

0f1c34b5082c02ac4ddbb26a0fb3840efbf54642303ff039a638c87c3e59fe79
SHA512

86e76c5a529995287afaaa11d2ba7a7ad013af0d358bc867ac18cb89a083e0a45adb18792a1051d6dd0d321a863945cf7c358fda1844840e635a46808952e4d0
SSDEEP

3072:BehvZ5uwVI0ecqWOgQmbNX/ZVC/5O0rEQkTmWHml+v53o:4hvDpGrgQShhyrYQk6Uv53o

Score

7^/10

Malware Config

Targets

- Target
  
  0b156962ad317fe1a1089b2dd54e9407
- Size
  
  132KB
- MD5
  
  0b156962ad317fe1a1089b2dd54e9407
- SHA1
  
  aec6b6813587ac1d4508a2995ad666fe96af2471
- SHA256
  
  0f1c34b5082c02ac4ddbb26a0fb3840efbf54642303ff039a638c87c3e59fe79
- SHA512
  
  86e76c5a529995287afaaa11d2ba7a7ad013af0d358bc867ac18cb89a083e0a45adb18792a1051d6dd0d321a863945cf7c358fda1844840e635a46808952e4d0
- SSDEEP
  
  3072:BehvZ5uwVI0ecqWOgQmbNX/ZVC/5O0rEQkTmWHml+v53o:4hvDpGrgQShhyrYQk6Uv53o
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2