83780cbcc9389f947a085bb5386bb15e6e8b8aa119c523187d655c3dace5d549 | Triage

Sharing

General

Target

ab7f4e97db788ebd3ce17edc09eeed05
Size

118KB
Sample

240228-kvdtbafg58
MD5

ab7f4e97db788ebd3ce17edc09eeed05
SHA1

5ab6a65587261aa116e065d5e6b27adf7edd2fb9
SHA256

83780cbcc9389f947a085bb5386bb15e6e8b8aa119c523187d655c3dace5d549
SHA512

4ea211d0c84ec1e67a47e19778536d91005a6582637310b2d752aced2721f0d6d3006b6b4b78a49220776c93b0d7e9e0394768f47fd4292116f50a86235442be
SSDEEP

3072:eijJkRqDIaSGqkx9V5pmRzb2REyXr8K5DMfz:XJiqvSGqkuzqLXQQ8

Score

7^/10

Malware Config

Targets

- Target
  
  ab7f4e97db788ebd3ce17edc09eeed05
- Size
  
  118KB
- MD5
  
  ab7f4e97db788ebd3ce17edc09eeed05
- SHA1
  
  5ab6a65587261aa116e065d5e6b27adf7edd2fb9
- SHA256
  
  83780cbcc9389f947a085bb5386bb15e6e8b8aa119c523187d655c3dace5d549
- SHA512
  
  4ea211d0c84ec1e67a47e19778536d91005a6582637310b2d752aced2721f0d6d3006b6b4b78a49220776c93b0d7e9e0394768f47fd4292116f50a86235442be
- SSDEEP
  
  3072:eijJkRqDIaSGqkx9V5pmRzb2REyXr8K5DMfz:XJiqvSGqkuzqLXQQ8
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2