3d896756bacbc5848143c0b9b831a9087f3a72ec676e226737300c177b95f706 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b1fe6a5dd6ba197b360a1d8575af09b
Size

490KB
Sample

240127-yjsd8aahe4
MD5

7b1fe6a5dd6ba197b360a1d8575af09b
SHA1

ec7dd775bb2215b21c3da0f88cbcae3eac2604f3
SHA256

3d896756bacbc5848143c0b9b831a9087f3a72ec676e226737300c177b95f706
SHA512

388386be38c19337c7d4daf1b72ab2d4a185c8f9fd402fc7c29fea11544d38aad1376e9d2b574f92c68d2f808fbd84c53f33c689faefbed020a08cec6d02cd5b
SSDEEP

12288:gyYOQOfQKfEBlT66fE1NKJcUzpdhBRkJBWm+w5rBOTaALSTKCq:IvrKglTg1bgrBk0RLSi

Score

7^/10

Malware Config

Targets

- Target
  
  7b1fe6a5dd6ba197b360a1d8575af09b
- Size
  
  490KB
- MD5
  
  7b1fe6a5dd6ba197b360a1d8575af09b
- SHA1
  
  ec7dd775bb2215b21c3da0f88cbcae3eac2604f3
- SHA256
  
  3d896756bacbc5848143c0b9b831a9087f3a72ec676e226737300c177b95f706
- SHA512
  
  388386be38c19337c7d4daf1b72ab2d4a185c8f9fd402fc7c29fea11544d38aad1376e9d2b574f92c68d2f808fbd84c53f33c689faefbed020a08cec6d02cd5b
- SSDEEP
  
  12288:gyYOQOfQKfEBlT66fE1NKJcUzpdhBRkJBWm+w5rBOTaALSTKCq:IvrKglTg1bgrBk0RLSi
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2