75fa7756400706a8f57e31f7f5680428d4e3bd75fa72dc0b4a6d8b6c19a1c15a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adaf7c5b6f6f7b01ae9bf1ac4481b5c4
Size

10KB
Sample

240229-e29axadb81
MD5

adaf7c5b6f6f7b01ae9bf1ac4481b5c4
SHA1

0448d81417a44ae8497e63b933541d57381e3db5
SHA256

75fa7756400706a8f57e31f7f5680428d4e3bd75fa72dc0b4a6d8b6c19a1c15a
SHA512

18b5d9341e57a5ee4935e9c0a731a4669011b02847e4f7003429c51e91becd68912a2e7b1c8b90efada6d833c70076a76730861eb6110e40c3b0a462764d90a9
SSDEEP

96:ZRm3QC3oSXGdTfwIqYwnumr4CX/Hx/HfpV5MIfyJQUqYwcca:XiQC3oSWdHwnzr9V/bfi7X

Score

7^/10

Malware Config

Targets

- Target
  
  adaf7c5b6f6f7b01ae9bf1ac4481b5c4
- Size
  
  10KB
- MD5
  
  adaf7c5b6f6f7b01ae9bf1ac4481b5c4
- SHA1
  
  0448d81417a44ae8497e63b933541d57381e3db5
- SHA256
  
  75fa7756400706a8f57e31f7f5680428d4e3bd75fa72dc0b4a6d8b6c19a1c15a
- SHA512
  
  18b5d9341e57a5ee4935e9c0a731a4669011b02847e4f7003429c51e91becd68912a2e7b1c8b90efada6d833c70076a76730861eb6110e40c3b0a462764d90a9
- SSDEEP
  
  96:ZRm3QC3oSXGdTfwIqYwnumr4CX/Hx/HfpV5MIfyJQUqYwcca:XiQC3oSWdHwnzr9V/bfi7X
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2