880e3f283194f01bd82af5fc16eca910e6e0b64b30fb46c0f642fe36b095478e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

880e3f283194f01bd82af5fc16eca910e6e0b64b30fb46c0f642fe36b095478e
Size

6.1MB
Sample

240202-apnq8abger
MD5

2db0515f507ea495db0ef8720ce95f06
SHA1

b3ce37db8a8971f48df5e2e4ae0533a541e26695
SHA256

880e3f283194f01bd82af5fc16eca910e6e0b64b30fb46c0f642fe36b095478e
SHA512

9fa1bd6e429cd579812ae0da64c15da08ddb5e61200218bfa8428e547eb8fb6503221982413f78a2c6eafaaa0b5fa48b31737773bd15e013c53844cdcee340f0
SSDEEP

98304:4h6h2coXIWLx/5ZvpqkPrrsTfGDC0TdWPxu9T03sSzErAyHqBdDxB5ErCOiQB:qAwx/3dvsTfOCkdv0cSaTKr35CCOiQB

Score

7^/10

Malware Config

Targets

- Target
  
  880e3f283194f01bd82af5fc16eca910e6e0b64b30fb46c0f642fe36b095478e
- Size
  
  6.1MB
- MD5
  
  2db0515f507ea495db0ef8720ce95f06
- SHA1
  
  b3ce37db8a8971f48df5e2e4ae0533a541e26695
- SHA256
  
  880e3f283194f01bd82af5fc16eca910e6e0b64b30fb46c0f642fe36b095478e
- SHA512
  
  9fa1bd6e429cd579812ae0da64c15da08ddb5e61200218bfa8428e547eb8fb6503221982413f78a2c6eafaaa0b5fa48b31737773bd15e013c53844cdcee340f0
- SSDEEP
  
  98304:4h6h2coXIWLx/5ZvpqkPrrsTfGDC0TdWPxu9T03sSzErAyHqBdDxB5ErCOiQB:qAwx/3dvsTfOCkdv0cSaTKr35CCOiQB
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2