b583fdceb5a091f31ab0c96c42881c6d4225f9eb4e583e27abff6248e05bd187 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f84477fba902368d8c0c279c3eba5001.bin
Size

123KB
Sample

240214-ebryyahd37
MD5

f84477fba902368d8c0c279c3eba5001
SHA1

cd6d2dcc932ff0ecfc5481ceba0d1e751adb1f3a
SHA256

b583fdceb5a091f31ab0c96c42881c6d4225f9eb4e583e27abff6248e05bd187
SHA512

43656f98c60d966fc9d201350a5dc55e86b9bc7f7265e0fa1f49dc66e19880cdf8f2b7c6672be8baa1dc030c130bc6a1ba16d47b6f248d12351ec9d9d986d05a
SSDEEP

1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGE:vCA9OtEvwDpjQ

Score

7^/10

Malware Config

Targets

- Target
  
  f84477fba902368d8c0c279c3eba5001.bin
- Size
  
  123KB
- MD5
  
  f84477fba902368d8c0c279c3eba5001
- SHA1
  
  cd6d2dcc932ff0ecfc5481ceba0d1e751adb1f3a
- SHA256
  
  b583fdceb5a091f31ab0c96c42881c6d4225f9eb4e583e27abff6248e05bd187
- SHA512
  
  43656f98c60d966fc9d201350a5dc55e86b9bc7f7265e0fa1f49dc66e19880cdf8f2b7c6672be8baa1dc030c130bc6a1ba16d47b6f248d12351ec9d9d986d05a
- SSDEEP
  
  1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGE:vCA9OtEvwDpjQ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2