6b8687e4a9ec832619d1e0477cc54e1709e25251c79571e697f6b43c4785fc29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b8687e4a9ec832619d1e0477cc54e1709e25251c79571e697f6b43c4785fc29.exe
Size

31KB
Sample

240107-w3ldxabffr
MD5

8463584120defd7d30724e6fa5ac3c5f
SHA1

82a7b4f679df09adc6779417887892f863a34619
SHA256

6b8687e4a9ec832619d1e0477cc54e1709e25251c79571e697f6b43c4785fc29
SHA512

86c93a72b4240e4c92101ee72163476d312d72f212fcefc45713e7383b3b3e13baf19bfc2096e21c2990d6ecf52359f140e58bdc495f9542e041754b5dc868ce
SSDEEP

384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfLg9P9KvT:bgX4zYcgTEu6QOaryfjqDzg9P9M

Score

7^/10

Malware Config

Targets

- Target
  
  6b8687e4a9ec832619d1e0477cc54e1709e25251c79571e697f6b43c4785fc29.exe
- Size
  
  31KB
- MD5
  
  8463584120defd7d30724e6fa5ac3c5f
- SHA1
  
  82a7b4f679df09adc6779417887892f863a34619
- SHA256
  
  6b8687e4a9ec832619d1e0477cc54e1709e25251c79571e697f6b43c4785fc29
- SHA512
  
  86c93a72b4240e4c92101ee72163476d312d72f212fcefc45713e7383b3b3e13baf19bfc2096e21c2990d6ecf52359f140e58bdc495f9542e041754b5dc868ce
- SSDEEP
  
  384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfLg9P9KvT:bgX4zYcgTEu6QOaryfjqDzg9P9M
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2