a4134490d2c4ae3be615b9fd37e3d27e13af842d854ae986d06d18c3908b1380 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39eca44b5f7876aa9e17855fa0ec7c7f
Size

208KB
Sample

231231-rv76gshcd7
MD5

39eca44b5f7876aa9e17855fa0ec7c7f
SHA1

48d622b59fbcdab50811ad76515a59028ed23831
SHA256

a4134490d2c4ae3be615b9fd37e3d27e13af842d854ae986d06d18c3908b1380
SHA512

bb5cdf13485f0a3e9a2387f2302e1d3ba5f776d02607c04084315aed32a14861ed9bb2f38bc97e1e2ea2e5fea983a53d7798a064dc875786a6311ee970dc5507
SSDEEP

3072:XChJgYMm4xf9cU9KQ2BxA59SPMqOoWn29O:rYMm4xiWKQ2BiCMyO

Score

7^/10

Malware Config

Targets

- Target
  
  39eca44b5f7876aa9e17855fa0ec7c7f
- Size
  
  208KB
- MD5
  
  39eca44b5f7876aa9e17855fa0ec7c7f
- SHA1
  
  48d622b59fbcdab50811ad76515a59028ed23831
- SHA256
  
  a4134490d2c4ae3be615b9fd37e3d27e13af842d854ae986d06d18c3908b1380
- SHA512
  
  bb5cdf13485f0a3e9a2387f2302e1d3ba5f776d02607c04084315aed32a14861ed9bb2f38bc97e1e2ea2e5fea983a53d7798a064dc875786a6311ee970dc5507
- SSDEEP
  
  3072:XChJgYMm4xf9cU9KQ2BxA59SPMqOoWn29O:rYMm4xiWKQ2BiCMyO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2