b1de81fa8ddf5adf98a1a9c311b95e2e25e0fc93af2b1312a7ec93985adb1814 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

crackme.rar
Size

48KB
Sample

240306-2k2wtscb5x
MD5

dd367402c2cf3b19476ffc26887f392c
SHA1

ab99a5f15256e30f8fb43fec81d9f8d9e96993b4
SHA256

b1de81fa8ddf5adf98a1a9c311b95e2e25e0fc93af2b1312a7ec93985adb1814
SHA512

107c3d03781d1d7d1276ab9baba7dd170bce4680c0e29b6f41f8ba54a617a12868416c1127a28cf611b5a0773ab5ae313fe99f81674e8023a80cd150dba2ce3c
SSDEEP

1536:w91ozuNKJVvzWoZkXbKj1wDixfPrTSRdfG:k1ZSVx/Zmixnf+de

Score

7^/10

Malware Config

Targets

- Target
  
  crackme.rar
- Size
  
  48KB
- MD5
  
  dd367402c2cf3b19476ffc26887f392c
- SHA1
  
  ab99a5f15256e30f8fb43fec81d9f8d9e96993b4
- SHA256
  
  b1de81fa8ddf5adf98a1a9c311b95e2e25e0fc93af2b1312a7ec93985adb1814
- SHA512
  
  107c3d03781d1d7d1276ab9baba7dd170bce4680c0e29b6f41f8ba54a617a12868416c1127a28cf611b5a0773ab5ae313fe99f81674e8023a80cd150dba2ce3c
- SSDEEP
  
  1536:w91ozuNKJVvzWoZkXbKj1wDixfPrTSRdfG:k1ZSVx/Zmixnf+de
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2 behavioral3
- Target
  
  crackme-stub.dll
- Size
  
  76KB
- MD5
  
  61ecd1aeb81875bb72a388fbbd9f5d81
- SHA1
  
  26b294c662d2a8c6ad46c22a4c0fbbed6f03218f
- SHA256
  
  183ed294777bb072440400d94f573639a2b7b7a62f9cd5c129aef69d30c99b69
- SHA512
  
  5698b91b474e5f2cf215939a54280677dd38d22577c2d72e5d7e0d67c6e773145f9b4e9fa7861d9d3fc45b3973494ff506698775b7fee7c4b5a56271dece6873
- SSDEEP
  
  768:nYNJnBBmD5jEKPdDryd6txq/cp8f8OAgFNjAaOpBxUIp3o:nYNFBBG5zVDryd6s68jA+NjA//xTp4
Score

1^/10
behavioral4 behavioral5 behavioral6
- Target
  
  crackme.exe
- Size
  
  64KB
- MD5
  
  c7a671d30c8e8dc1d99f0f3a9767afec
- SHA1
  
  43175d92e9b307a3c6d4ae9ab9fc40b01b84ecc1
- SHA256
  
  b15f98ba8ebfdf2df3f256bb185206ef55c5504c50c4943d266943da0e7dd7d2
- SHA512
  
  d7691650451a86353efb2ba2df95358a84c07f8459e557fc347ccdf716f2b750c9049c3dd96e12bf387b4d420172a0a2d7f94793329d1a881f99f33fe45df685
- SSDEEP
  
  768:DUqGuqGDLjSshA73VeMCm3pQHVBoDKOuMy5EHyT4dLrpz81V9u6ZPSHY8Iq:dqGK5FdKBoD9HW4dXpI1VY0q
Score

1^/10
behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9