5b2e407d4e43bc7fe6d932175ac240430be0a38e81f7e9baa2262174c603b2c2 | Triage

Sharing

General

Target

5b2e407d4e43bc7fe6d932175ac240430be0a38e81f7e9baa2262174c603b2c2
Size

560KB
Sample

240309-2fcq5sdb6v
MD5

8d43d3f025771117ac6eb60fee45f48b
SHA1

627b1a7dc8d042ae226566c46c3534ecf2f189ed
SHA256

5b2e407d4e43bc7fe6d932175ac240430be0a38e81f7e9baa2262174c603b2c2
SHA512

249b53045b0e17a2e2371a1d175f43efe4099f99a37da12a41767cc59c42b8b82818b108f68262308dce00e13802cce4838b252aaa763ff4ef77af2972f59e1b
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxj:dqDAwl0xPTMiR9JSSxPUKYGdodH4

Score

7^/10

Malware Config

Targets

- Target
  
  5b2e407d4e43bc7fe6d932175ac240430be0a38e81f7e9baa2262174c603b2c2
- Size
  
  560KB
- MD5
  
  8d43d3f025771117ac6eb60fee45f48b
- SHA1
  
  627b1a7dc8d042ae226566c46c3534ecf2f189ed
- SHA256
  
  5b2e407d4e43bc7fe6d932175ac240430be0a38e81f7e9baa2262174c603b2c2
- SHA512
  
  249b53045b0e17a2e2371a1d175f43efe4099f99a37da12a41767cc59c42b8b82818b108f68262308dce00e13802cce4838b252aaa763ff4ef77af2972f59e1b
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxj:dqDAwl0xPTMiR9JSSxPUKYGdodH4
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2