84d5a89098e572c70875eb34b8b1e1afec6d62a9479087a324aa9935d67792d1 | Triage

Sharing

General

Target

0dd7be06304eeef29f283a6831f266eb
Size

521KB
Sample

231230-enmvracad7
MD5

0dd7be06304eeef29f283a6831f266eb
SHA1

63d30c952f5d67fa471755b1730ecd65f85f752e
SHA256

84d5a89098e572c70875eb34b8b1e1afec6d62a9479087a324aa9935d67792d1
SHA512

3c046d38473d6e8d7ee5434a5b11c4cbca5764de004574fb4737c5a4a51e48ac5e02065ecb8b734fbdf3679d7af0952ecad7324dea909f251e0c3cdc4cfafcb0
SSDEEP

12288:b79WjXvHsLll59YOBrzkr51us7TPyF9j8bx7B:b79nB9vR+r7jiFU7B

Score

7^/10

Malware Config

Targets

- Target
  
  0dd7be06304eeef29f283a6831f266eb
- Size
  
  521KB
- MD5
  
  0dd7be06304eeef29f283a6831f266eb
- SHA1
  
  63d30c952f5d67fa471755b1730ecd65f85f752e
- SHA256
  
  84d5a89098e572c70875eb34b8b1e1afec6d62a9479087a324aa9935d67792d1
- SHA512
  
  3c046d38473d6e8d7ee5434a5b11c4cbca5764de004574fb4737c5a4a51e48ac5e02065ecb8b734fbdf3679d7af0952ecad7324dea909f251e0c3cdc4cfafcb0
- SSDEEP
  
  12288:b79WjXvHsLll59YOBrzkr51us7TPyF9j8bx7B:b79nB9vR+r7jiFU7B
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2