d9e8f4469651d9d98eda3e27716e93f6ffe6a6f41240afccc4a5226cfcd07576 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c8612c6271e859e2bb81e431a253bf2
Size

25KB
Sample

231231-hskgzadfb4
MD5

2c8612c6271e859e2bb81e431a253bf2
SHA1

25bf6cd17f655eae5ce92266832f850331a19605
SHA256

d9e8f4469651d9d98eda3e27716e93f6ffe6a6f41240afccc4a5226cfcd07576
SHA512

007bd93cb3871f4ce41ce1cd8d183b0dad9cf1199bf480073a534df419b7b8b5b3cb35378b2250f5f6fbb4c99c303be5976b88b4ada525332f2562d9928680fc
SSDEEP

384:/QaQWRIgS3Wvr+DipTy08EqgBq+MmOjso7D4bHIin+5ama72o92sTLI:/fhR+SEipTyC3Bq+MFhC+5amI2nILI

Score

7^/10

Malware Config

Targets

- Target
  
  2c8612c6271e859e2bb81e431a253bf2
- Size
  
  25KB
- MD5
  
  2c8612c6271e859e2bb81e431a253bf2
- SHA1
  
  25bf6cd17f655eae5ce92266832f850331a19605
- SHA256
  
  d9e8f4469651d9d98eda3e27716e93f6ffe6a6f41240afccc4a5226cfcd07576
- SHA512
  
  007bd93cb3871f4ce41ce1cd8d183b0dad9cf1199bf480073a534df419b7b8b5b3cb35378b2250f5f6fbb4c99c303be5976b88b4ada525332f2562d9928680fc
- SSDEEP
  
  384:/QaQWRIgS3Wvr+DipTy08EqgBq+MmOjso7D4bHIin+5ama72o92sTLI:/fhR+SEipTyC3Bq+MFhC+5amI2nILI
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2