05441921b3393d11f9ee306e524124a68f47733aaf9bff0cbd0642fd66547788 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71af9a68eda4bc388301b2df43d673a2
Size

471KB
Sample

240124-jrrqbsddap
MD5

71af9a68eda4bc388301b2df43d673a2
SHA1

7b624f87f306d1223bf3bcbba02f98257c2d90f3
SHA256

05441921b3393d11f9ee306e524124a68f47733aaf9bff0cbd0642fd66547788
SHA512

3caee170127fb54c17dc9f928e63da4822c61e4d44fc1856f0adc7df0dda6ea814927b8a27e45204c75e30938c13f6a3f6c304fffc0b7d862036df8040c77b0a
SSDEEP

6144:amsyd7BspOWZ+Stxo3Gc2uqy3gu88mWCMpCRWFf2Kj+m+6X4Yb:mpO3StxwGc2c3tfmfsCRA22+m+8n

Score

7^/10

Malware Config

Targets

- Target
  
  71af9a68eda4bc388301b2df43d673a2
- Size
  
  471KB
- MD5
  
  71af9a68eda4bc388301b2df43d673a2
- SHA1
  
  7b624f87f306d1223bf3bcbba02f98257c2d90f3
- SHA256
  
  05441921b3393d11f9ee306e524124a68f47733aaf9bff0cbd0642fd66547788
- SHA512
  
  3caee170127fb54c17dc9f928e63da4822c61e4d44fc1856f0adc7df0dda6ea814927b8a27e45204c75e30938c13f6a3f6c304fffc0b7d862036df8040c77b0a
- SSDEEP
  
  6144:amsyd7BspOWZ+Stxo3Gc2uqy3gu88mWCMpCRWFf2Kj+m+6X4Yb:mpO3StxwGc2c3tfmfsCRA22+m+8n
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2