e617b3dccc9f23ffade510064dc9182779886a310ac9a3b10a3978f5beb18666 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a131fffa62f9d02261712cfc440de263.bin
Size

44KB
Sample

240213-d9j6bagg51
MD5

a131fffa62f9d02261712cfc440de263
SHA1

266011a925ce46980b50c9870065b96d9abb15f9
SHA256

e617b3dccc9f23ffade510064dc9182779886a310ac9a3b10a3978f5beb18666
SHA512

c981a0c57f99b0e590593c2d68971b2c9a059af456e5f6f9f8cb2ad24f223c714d906e03f0bfa8b49383f6c90f63bc579069361f179bd27f5954f6f1cdeee98f
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/WZrEu/d+qmsUHQ1wsw:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ1K

Score

7^/10

Malware Config

Targets

- Target
  
  a131fffa62f9d02261712cfc440de263.bin
- Size
  
  44KB
- MD5
  
  a131fffa62f9d02261712cfc440de263
- SHA1
  
  266011a925ce46980b50c9870065b96d9abb15f9
- SHA256
  
  e617b3dccc9f23ffade510064dc9182779886a310ac9a3b10a3978f5beb18666
- SHA512
  
  c981a0c57f99b0e590593c2d68971b2c9a059af456e5f6f9f8cb2ad24f223c714d906e03f0bfa8b49383f6c90f63bc579069361f179bd27f5954f6f1cdeee98f
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/WZrEu/d+qmsUHQ1wsw:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ1K
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2