ed71faabfe7f938fcf8e3557b15e7cd0cfe96441836a1f26afbc628a8c50c483 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae80498f144354ee714700ca23de1b14.bin
Size

31KB
Sample

240212-drz4tadg57
MD5

ae80498f144354ee714700ca23de1b14
SHA1

56f69c70b4f50a6c3f1fdd45e940cca33f35077c
SHA256

ed71faabfe7f938fcf8e3557b15e7cd0cfe96441836a1f26afbc628a8c50c483
SHA512

9144e3dbfcb1a8c753aaf47e4974e47b285babada5f23176413a39a01f995b49b29e5ef4093c54b743466f2358189e2a15eba4cba897ecc2921f604bceb366e5
SSDEEP

384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/BuP:b7o/2n1TCraU6GD1a4Xt90

Score

7^/10

Malware Config

Targets

- Target
  
  ae80498f144354ee714700ca23de1b14.bin
- Size
  
  31KB
- MD5
  
  ae80498f144354ee714700ca23de1b14
- SHA1
  
  56f69c70b4f50a6c3f1fdd45e940cca33f35077c
- SHA256
  
  ed71faabfe7f938fcf8e3557b15e7cd0cfe96441836a1f26afbc628a8c50c483
- SHA512
  
  9144e3dbfcb1a8c753aaf47e4974e47b285babada5f23176413a39a01f995b49b29e5ef4093c54b743466f2358189e2a15eba4cba897ecc2921f604bceb366e5
- SSDEEP
  
  384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/BuP:b7o/2n1TCraU6GD1a4Xt90
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2