30c39af78f0d3ec0a62f056b0c1e725e26ec469c121d47aab775fcf6ce7757ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d308d7df3181c8e10d961ebca349b5a665d8eda6df05fca978e9165d4e380ca.exe.zip
Size

62.3MB
Sample

231231-ca7a5ahgdj
MD5

655d63099f3894a4778cd897c0d02158
SHA1

c956ab2ed3b4333d3d3c9a9a075f6966cfa989f8
SHA256

30c39af78f0d3ec0a62f056b0c1e725e26ec469c121d47aab775fcf6ce7757ea
SHA512

d2c21a0952a336dccaa4b83248d4501e177d79a24eef0943bc687d7e8a290f02cbefb2e2a8f178546aa649fd88ef9fdf66409cc2d20c8cce3c9d8909a4412653
SSDEEP

1572864:Ef/8gNcOQhx5zSHXvW2mEXEumwiKz1Uljbdos+9AxNS:E3UOQh+HXvREumwiFBFxrS

Score

7^/10

Malware Config

Targets

- Target
  
  5d308d7df3181c8e10d961ebca349b5a665d8eda6df05fca978e9165d4e380ca.exe
- Size
  
  65.5MB
- MD5
  
  6613b847292a0b7f246b35eaab993c94
- SHA1
  
  9a4f9aee46293bbbe33e75c4f71c49911c7719fb
- SHA256
  
  5d308d7df3181c8e10d961ebca349b5a665d8eda6df05fca978e9165d4e380ca
- SHA512
  
  2ac078f386f09e1f12c92ea89adf8e7266f9b03b06ef540a080f108cd0971b624441b69e5a5e447b592b8954b12206e2a35b528ebe602d807c3b0a30a54fb74f
- SSDEEP
  
  1572864:g43BkNe5iof1ewvEraVlWcDXTIJSBCm2cFb7m:x/AwvEcjLTIsBC1cFXm
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2