84aadf27b55ade8c26f3e4c7dd966511b4ac1bbdcd4b21e238feffcd7c5ce6aa | Triage

Sharing

General

Target

5c0787efc3e6192d07195b0821da5937
Size

252KB
Sample

240115-d4wbdshef2
MD5

5c0787efc3e6192d07195b0821da5937
SHA1

17cbb41c6173e5b4577aa8e6a37e04d6b2e6ab35
SHA256

84aadf27b55ade8c26f3e4c7dd966511b4ac1bbdcd4b21e238feffcd7c5ce6aa
SHA512

6ead2aeafecab20f9f6839d5cdec7522ecd87520fc95c07bba967cd0506c1d63aeb3947843beb9e8a985ea282206a707d4f475c2b0974d18f737c2fc127ead73
SSDEEP

3072:ZYUb5QoJ4g+Ri+Zj6Iz1ZdW4SrO7FSVpxj:ZY7xh6SZI4z7FSVpxj

Score

7^/10

Malware Config

Targets

- Target
  
  5c0787efc3e6192d07195b0821da5937
- Size
  
  252KB
- MD5
  
  5c0787efc3e6192d07195b0821da5937
- SHA1
  
  17cbb41c6173e5b4577aa8e6a37e04d6b2e6ab35
- SHA256
  
  84aadf27b55ade8c26f3e4c7dd966511b4ac1bbdcd4b21e238feffcd7c5ce6aa
- SHA512
  
  6ead2aeafecab20f9f6839d5cdec7522ecd87520fc95c07bba967cd0506c1d63aeb3947843beb9e8a985ea282206a707d4f475c2b0974d18f737c2fc127ead73
- SSDEEP
  
  3072:ZYUb5QoJ4g+Ri+Zj6Iz1ZdW4SrO7FSVpxj:ZY7xh6SZI4z7FSVpxj
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2