caae9d7852dfa8704fef118e7e374af9cd21b81144e0c6312c51aa499aee0b7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bca715c57a2fd19112b63ef541f3034
Size

330KB
Sample

240214-qpf95sbg2t
MD5

9bca715c57a2fd19112b63ef541f3034
SHA1

b33bb870278f69070714f456d81f9d58a9dc78ef
SHA256

caae9d7852dfa8704fef118e7e374af9cd21b81144e0c6312c51aa499aee0b7e
SHA512

7ca69ba95c04637454f8a2f8e4ac5043a64a7ac3f0c58ee0f187e721c478e70f51e3151d9017c8ea353c8683b3c867147a2044ede051c9ae6744bf27dcdf8cdd
SSDEEP

6144:DZL71sfdQVFP3XqvnJUWaeKNZnZXOZipCTUYfxoM6ZacmVnowQ/F3I4:dL71sVSPHquBMZNA0xoMQacWoXt3

Score

7^/10

Malware Config

Targets

- Target
  
  9bca715c57a2fd19112b63ef541f3034
- Size
  
  330KB
- MD5
  
  9bca715c57a2fd19112b63ef541f3034
- SHA1
  
  b33bb870278f69070714f456d81f9d58a9dc78ef
- SHA256
  
  caae9d7852dfa8704fef118e7e374af9cd21b81144e0c6312c51aa499aee0b7e
- SHA512
  
  7ca69ba95c04637454f8a2f8e4ac5043a64a7ac3f0c58ee0f187e721c478e70f51e3151d9017c8ea353c8683b3c867147a2044ede051c9ae6744bf27dcdf8cdd
- SSDEEP
  
  6144:DZL71sfdQVFP3XqvnJUWaeKNZnZXOZipCTUYfxoM6ZacmVnowQ/F3I4:dL71sVSPHquBMZNA0xoMQacWoXt3
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2