9488b75e02e9ac52615140d0dfddfcda67980e927268ac60e50d8cd2d72c8268 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9488b75e02e9ac52615140d0dfddfcda67980e927268ac60e50d8cd2d72c8268
Size

21KB
Sample

240305-231rgsca4s
MD5

a40f9d4a46bbec97e18f9bedfa42e6b2
SHA1

d87bf6d658175fe653e4bb2d00df4df845a63e0f
SHA256

9488b75e02e9ac52615140d0dfddfcda67980e927268ac60e50d8cd2d72c8268
SHA512

aa246c58055643252a0d29f61295dd992593bd207b7f5c408ac634d036e1769a24a6050e90da123a1c432ac39d1fb891e75e9ae8959800606e09d5f6e32e24b9
SSDEEP

384:1HQWQWRIGKp3Imw7IO+xK/gLffBp7TdVxoGI3rk1EdS3sjdna2i0r6/QK:1ThROpRY+xKa1kfiEY8xalt/h

Score

7^/10

Malware Config

Targets

- Target
  
  9488b75e02e9ac52615140d0dfddfcda67980e927268ac60e50d8cd2d72c8268
- Size
  
  21KB
- MD5
  
  a40f9d4a46bbec97e18f9bedfa42e6b2
- SHA1
  
  d87bf6d658175fe653e4bb2d00df4df845a63e0f
- SHA256
  
  9488b75e02e9ac52615140d0dfddfcda67980e927268ac60e50d8cd2d72c8268
- SHA512
  
  aa246c58055643252a0d29f61295dd992593bd207b7f5c408ac634d036e1769a24a6050e90da123a1c432ac39d1fb891e75e9ae8959800606e09d5f6e32e24b9
- SSDEEP
  
  384:1HQWQWRIGKp3Imw7IO+xK/gLffBp7TdVxoGI3rk1EdS3sjdna2i0r6/QK:1ThROpRY+xKa1kfiEY8xalt/h
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2