00327ceca917ec46fcb36ed4bb1faf16d81ef93a525dcc708e5533bbe688934e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c7d1a4f19c81f141d20b7f225c2dd23
Size

204KB
Sample

231230-zyf56sbfa9
MD5

1c7d1a4f19c81f141d20b7f225c2dd23
SHA1

66af5ed751060eee3bca7cfef075d9aef8921044
SHA256

00327ceca917ec46fcb36ed4bb1faf16d81ef93a525dcc708e5533bbe688934e
SHA512

c4a8835d889b0ab019a933fe2027b44ebe14d6df47cb71396145fb9e2e95c622f15439ddbdee1a5b1e3fc25a066b7b9bc1acc51bffb059ee98e60911c4fcaf85
SSDEEP

3072:xePgCctxGv4QcU9KQ2BBA2waPxytmolWm:NCctxGsWKQ2Bx5xiim

Score

7^/10

Malware Config

Targets

- Target
  
  1c7d1a4f19c81f141d20b7f225c2dd23
- Size
  
  204KB
- MD5
  
  1c7d1a4f19c81f141d20b7f225c2dd23
- SHA1
  
  66af5ed751060eee3bca7cfef075d9aef8921044
- SHA256
  
  00327ceca917ec46fcb36ed4bb1faf16d81ef93a525dcc708e5533bbe688934e
- SHA512
  
  c4a8835d889b0ab019a933fe2027b44ebe14d6df47cb71396145fb9e2e95c622f15439ddbdee1a5b1e3fc25a066b7b9bc1acc51bffb059ee98e60911c4fcaf85
- SSDEEP
  
  3072:xePgCctxGv4QcU9KQ2BBA2waPxytmolWm:NCctxGsWKQ2Bx5xiim
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2