c057706eb7688796e71ad3e296e45e9d96c7654bd67fae914a1cec014ce30f7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaa21892ea8927d6e1472da71bf40f46
Size

96KB
Sample

240228-bmma2sfg7s
MD5

aaa21892ea8927d6e1472da71bf40f46
SHA1

f8dd1a2aabc253ec2d3a8c936c3bef9195c7f694
SHA256

c057706eb7688796e71ad3e296e45e9d96c7654bd67fae914a1cec014ce30f7b
SHA512

672dc9999f37dba11266381ad35486ff14b226d3849abbf59278d1bdc5d2419f7197fb24817e7df869a3d2dd54e1f64e7b058c66caf4e65e8f3c2fab8beddf4d
SSDEEP

1536:gfPYm4toWOARhi383nZiY02YAs+JhCLy/o4tCVI8EtgII5WubvHk0CrJ/:gXYm4to9A283nZiGcSt/o4+4tgR5WgS1

Score

7^/10

Malware Config

Targets

- Target
  
  aaa21892ea8927d6e1472da71bf40f46
- Size
  
  96KB
- MD5
  
  aaa21892ea8927d6e1472da71bf40f46
- SHA1
  
  f8dd1a2aabc253ec2d3a8c936c3bef9195c7f694
- SHA256
  
  c057706eb7688796e71ad3e296e45e9d96c7654bd67fae914a1cec014ce30f7b
- SHA512
  
  672dc9999f37dba11266381ad35486ff14b226d3849abbf59278d1bdc5d2419f7197fb24817e7df869a3d2dd54e1f64e7b058c66caf4e65e8f3c2fab8beddf4d
- SSDEEP
  
  1536:gfPYm4toWOARhi383nZiY02YAs+JhCLy/o4tCVI8EtgII5WubvHk0CrJ/:gXYm4to9A283nZiGcSt/o4+4tgR5WgS1
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2