f019596f88bf76713b21eb5d71d10c0298dfcb59b94ea65409ea1404fb6657d0 | Triage

Sharing

General

Target

710605a130a5d1e19e12e8ba091d1a2b
Size

489KB
Sample

240124-bctblsebhr
MD5

710605a130a5d1e19e12e8ba091d1a2b
SHA1

f77df77f0037981e37d7def1db128a6d86f0493d
SHA256

f019596f88bf76713b21eb5d71d10c0298dfcb59b94ea65409ea1404fb6657d0
SHA512

719c7d0fbf5d53932f90f5abb495beedaa8cff43fc873af1bdb7b58e6720db061403655c07382e8082d3f1187a49bc717ee5d825eeb512171911c3bb5e69ed9d
SSDEEP

12288:56TPW1Fm3lj0emIe1wcwqkcIJm7czh2N8nUlZPWU+Dz:cD4FEQemIwwcwq3IJ9N2ynQ1Qz

Score

7^/10

Malware Config

Targets

- Target
  
  710605a130a5d1e19e12e8ba091d1a2b
- Size
  
  489KB
- MD5
  
  710605a130a5d1e19e12e8ba091d1a2b
- SHA1
  
  f77df77f0037981e37d7def1db128a6d86f0493d
- SHA256
  
  f019596f88bf76713b21eb5d71d10c0298dfcb59b94ea65409ea1404fb6657d0
- SHA512
  
  719c7d0fbf5d53932f90f5abb495beedaa8cff43fc873af1bdb7b58e6720db061403655c07382e8082d3f1187a49bc717ee5d825eeb512171911c3bb5e69ed9d
- SSDEEP
  
  12288:56TPW1Fm3lj0emIe1wcwqkcIJm7czh2N8nUlZPWU+Dz:cD4FEQemIwwcwq3IJ9N2ynQ1Qz
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2