12287473e84abc495ca9effbd7e44919abcffc9c70b934adbc5a0c7a0e73b645 | Triage

Sharing

General

Target

ac6889d96187344437c41cd468eb8efc
Size

284KB
Sample

240228-vnp8wahd49
MD5

ac6889d96187344437c41cd468eb8efc
SHA1

a35d470a182740f49a59a4e55603c236f0503faf
SHA256

12287473e84abc495ca9effbd7e44919abcffc9c70b934adbc5a0c7a0e73b645
SHA512

c89d07c5e451b507c5ce049b6c01e9199d062a7e57fec020954e10bd54b5365f600b2e3cb0ab63bebeac8a451037e8c7a60ca460cc61bcf7fbab1a1969fd57f8
SSDEEP

6144:PnFYncdaSKkr3YnPh9yQpIiiqwSNoELJsdUUoRSnxmkP58heH9:PCncUS7rYOarsyPSxRx8W9

Score

7^/10

Malware Config

Targets

- Target
  
  ac6889d96187344437c41cd468eb8efc
- Size
  
  284KB
- MD5
  
  ac6889d96187344437c41cd468eb8efc
- SHA1
  
  a35d470a182740f49a59a4e55603c236f0503faf
- SHA256
  
  12287473e84abc495ca9effbd7e44919abcffc9c70b934adbc5a0c7a0e73b645
- SHA512
  
  c89d07c5e451b507c5ce049b6c01e9199d062a7e57fec020954e10bd54b5365f600b2e3cb0ab63bebeac8a451037e8c7a60ca460cc61bcf7fbab1a1969fd57f8
- SSDEEP
  
  6144:PnFYncdaSKkr3YnPh9yQpIiiqwSNoELJsdUUoRSnxmkP58heH9:PCncUS7rYOarsyPSxRx8W9
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2