1dfcb8c642765fef770f5119763f81438a28ade367520184581d0b71a7c3e525 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f4b679d7cb344ac303b2b394a2fda68
Size

723KB
Sample

231230-flx4dacbb2
MD5

0f4b679d7cb344ac303b2b394a2fda68
SHA1

f86efc64c21a2a8ee6156f43b12b1cdf39cedbdc
SHA256

1dfcb8c642765fef770f5119763f81438a28ade367520184581d0b71a7c3e525
SHA512

32df9e4c4e1da79c4bc645455faa5676aecd8e3a8ec507d9c4a787e83d9e62e08e5b11e12d4cdafa34672fa9f0a30ad3c6ef844cf9fb60b623c3a3590b7701a6
SSDEEP

12288:tBpQUlDhQ7QfER7QtCDBV5E5GGptWQHII9Hp:PnDhoQfk7QtKBVcII9Hp

Score

7^/10

Malware Config

Targets

- Target
  
  0f4b679d7cb344ac303b2b394a2fda68
- Size
  
  723KB
- MD5
  
  0f4b679d7cb344ac303b2b394a2fda68
- SHA1
  
  f86efc64c21a2a8ee6156f43b12b1cdf39cedbdc
- SHA256
  
  1dfcb8c642765fef770f5119763f81438a28ade367520184581d0b71a7c3e525
- SHA512
  
  32df9e4c4e1da79c4bc645455faa5676aecd8e3a8ec507d9c4a787e83d9e62e08e5b11e12d4cdafa34672fa9f0a30ad3c6ef844cf9fb60b623c3a3590b7701a6
- SSDEEP
  
  12288:tBpQUlDhQ7QfER7QtCDBV5E5GGptWQHII9Hp:PnDhoQfk7QtKBVcII9Hp
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2