0b4a781e50a591c79e380ae584d73ac694236619dd7351a1217ef4c01acdc04c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78096d9903e4e78908b5999e1ecae1ea
Size

637KB
Sample

240126-ws7jdsdabr
MD5

78096d9903e4e78908b5999e1ecae1ea
SHA1

f672266436fa320e8beb515eb70562b38a7aaf74
SHA256

0b4a781e50a591c79e380ae584d73ac694236619dd7351a1217ef4c01acdc04c
SHA512

cf8e5a465531f929915327d186eb909944a9b0e5cd756abf95037ef32c8abc0fef407cfc133e91d0e74ba51257100abb7735b3a2e75ee74947d9fdedf088b3df
SSDEEP

12288:lDWuMRjq6aktE3FrbpvtyFDXR0gYwxeF3Z4mxxrvQhm45G9p/uUQtBH1hf:laDE2SltiXRXZeQmXEhsrLQHVN

Score

7^/10

Malware Config

Targets

- Target
  
  78096d9903e4e78908b5999e1ecae1ea
- Size
  
  637KB
- MD5
  
  78096d9903e4e78908b5999e1ecae1ea
- SHA1
  
  f672266436fa320e8beb515eb70562b38a7aaf74
- SHA256
  
  0b4a781e50a591c79e380ae584d73ac694236619dd7351a1217ef4c01acdc04c
- SHA512
  
  cf8e5a465531f929915327d186eb909944a9b0e5cd756abf95037ef32c8abc0fef407cfc133e91d0e74ba51257100abb7735b3a2e75ee74947d9fdedf088b3df
- SSDEEP
  
  12288:lDWuMRjq6aktE3FrbpvtyFDXR0gYwxeF3Z4mxxrvQhm45G9p/uUQtBH1hf:laDE2SltiXRXZeQmXEhsrLQHVN
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2