55f8e1f14e74637969080aeff441fc320ffbb29411351331fb76fc009ffc7ce3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96bff2573c5778118eb13dde0e187b20.bin
Size

60KB
Sample

240229-cb6e8aah84
MD5

96bff2573c5778118eb13dde0e187b20
SHA1

9360acdfc6ab6420682f39c64b2f96e59fe0df57
SHA256

55f8e1f14e74637969080aeff441fc320ffbb29411351331fb76fc009ffc7ce3
SHA512

0db591ce84c8a38d6ce178d527863e1237744354444e468d9c867f2e17c0863ee8af18c63cbbb26e3878702d1140bfe017364a5c0803be429b5f76ef91523b13
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj38lD/cMAT+lBOM:ZVxkGOtEvwDpj4

Score

7^/10

Malware Config

Targets

- Target
  
  96bff2573c5778118eb13dde0e187b20.bin
- Size
  
  60KB
- MD5
  
  96bff2573c5778118eb13dde0e187b20
- SHA1
  
  9360acdfc6ab6420682f39c64b2f96e59fe0df57
- SHA256
  
  55f8e1f14e74637969080aeff441fc320ffbb29411351331fb76fc009ffc7ce3
- SHA512
  
  0db591ce84c8a38d6ce178d527863e1237744354444e468d9c867f2e17c0863ee8af18c63cbbb26e3878702d1140bfe017364a5c0803be429b5f76ef91523b13
- SSDEEP
  
  1536:ZzFbxmLPWQMOtEvwDpj38lD/cMAT+lBOM:ZVxkGOtEvwDpj4
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2