67c2ec5d6f452ab6f7ea6ab5c01cd2823218bd607578184a6a6aa508c9109fb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48a35b264961c8ce0cebe0b0393f323d
Size

9KB
Sample

240107-lnm9vaadaq
MD5

48a35b264961c8ce0cebe0b0393f323d
SHA1

1cd10ca67868a070b6b3f7c175a4fcded2e6eb4c
SHA256

67c2ec5d6f452ab6f7ea6ab5c01cd2823218bd607578184a6a6aa508c9109fb6
SHA512

9da23e80204693990b30405a38c5d6d432d25bc6d5abf0cf666634c29f033ddc4a5696c6f905d8faa9a9f0a63b0109636eaeb14652c3792dc40660f3dd265e55
SSDEEP

192:HymTSrQWRIcSvK0OmoarauG+k7v1dlD/Wjb+n:HxTsQWRIcS1forPBnD3n

Score

7^/10

Malware Config

Targets

- Target
  
  48a35b264961c8ce0cebe0b0393f323d
- Size
  
  9KB
- MD5
  
  48a35b264961c8ce0cebe0b0393f323d
- SHA1
  
  1cd10ca67868a070b6b3f7c175a4fcded2e6eb4c
- SHA256
  
  67c2ec5d6f452ab6f7ea6ab5c01cd2823218bd607578184a6a6aa508c9109fb6
- SHA512
  
  9da23e80204693990b30405a38c5d6d432d25bc6d5abf0cf666634c29f033ddc4a5696c6f905d8faa9a9f0a63b0109636eaeb14652c3792dc40660f3dd265e55
- SSDEEP
  
  192:HymTSrQWRIcSvK0OmoarauG+k7v1dlD/Wjb+n:HxTsQWRIcS1forPBnD3n
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2