9bf7296c85b89c337619baf26eb6e21fa25169210bc24ad54397932b74ba5a3c | Triage

Sharing

General

Target

3fa079ca6ec1e8d9d1baf7b584600114.bin
Size

1.8MB
Sample

240212-cdcwpafa6z
MD5

e1dfffb19da122d4bd33b9f9ab3a1558
SHA1

1676657424df1715d7a504445e6dbecfec71fe54
SHA256

9bf7296c85b89c337619baf26eb6e21fa25169210bc24ad54397932b74ba5a3c
SHA512

a54ec34b2bce829053bb814e3a967989694c40afad7d54a88790696fabb50c77ece42028833f926db2bdd92a5932b7894de6d25775e2f0bb54e66cc790128dbc
SSDEEP

49152:ufmrlsbCPddGjOCqBpF0sKOLPRTrE7VImwtWBWGUqxAxDnFe3:CmqbWSOtphKOJGiTWznWxDnFC

Score

7^/10

Malware Config

Targets

- Target
  
  605baf6490c8824e59b10134dd0461c9caecac5cfd2a086be3e98682caf49a86.exe
- Size
  
  2.0MB
- MD5
  
  3fa079ca6ec1e8d9d1baf7b584600114
- SHA1
  
  8eaaafdc7520daefcd973ffc5b33fb861d703e97
- SHA256
  
  605baf6490c8824e59b10134dd0461c9caecac5cfd2a086be3e98682caf49a86
- SHA512
  
  f9039341d2a81b7c108dc260e27aedfd3fc9f73ba24f0ecd39a354fddb06c11232cd92464db294cffa7115589cb8f936147b841bda87fcd1e27efaf35f5618e2
- SSDEEP
  
  49152:1monDZqrSFkUrvblEIXwOJ9LGME8Ssv6qPajeEhsZ:1movjmuLd1W78
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2