207fbdbeb366b2bbfdd23adc7d39c6a222e9a8ae5c6fe7fdb863f9da18ea4491 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4470681502b0a4226480c2166cc0994d
Size

1.1MB
Sample

240105-zxqm8abgh6
MD5

4470681502b0a4226480c2166cc0994d
SHA1

4d527979c631f83058df072e15529b05317b441c
SHA256

207fbdbeb366b2bbfdd23adc7d39c6a222e9a8ae5c6fe7fdb863f9da18ea4491
SHA512

26f6d83ba504aa0bb6af1206ce6ab36ac4153d8ceaaa1041424f02cf0e4b51aaebe3e21f593e381a10b8db019116f6a18b20548772f0b15c24232ec77bbbc24c
SSDEEP

24576:DSTf7HUexbctvDygPwXyseJkQOgmfhaXy/d3iX:+TjHFg4SOvhai/d3iX

Score

7^/10

Malware Config

Targets

- Target
  
  4470681502b0a4226480c2166cc0994d
- Size
  
  1.1MB
- MD5
  
  4470681502b0a4226480c2166cc0994d
- SHA1
  
  4d527979c631f83058df072e15529b05317b441c
- SHA256
  
  207fbdbeb366b2bbfdd23adc7d39c6a222e9a8ae5c6fe7fdb863f9da18ea4491
- SHA512
  
  26f6d83ba504aa0bb6af1206ce6ab36ac4153d8ceaaa1041424f02cf0e4b51aaebe3e21f593e381a10b8db019116f6a18b20548772f0b15c24232ec77bbbc24c
- SSDEEP
  
  24576:DSTf7HUexbctvDygPwXyseJkQOgmfhaXy/d3iX:+TjHFg4SOvhai/d3iX
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2