fb82418fc21bc10d4b1a1115adfbe16f4d65cb9935e72475e3ffc172f4701568 | Triage

Sharing

General

Target

fb82418fc21bc10d4b1a1115adfbe16f4d65cb9935e72475e3ffc172f4701568
Size

462KB
Sample

240309-ly41caff4s
MD5

047852f254f727f3ece3da7d9e02a890
SHA1

fe2c5c5255fc718b2e1c12fe5595822087ea8e7e
SHA256

fb82418fc21bc10d4b1a1115adfbe16f4d65cb9935e72475e3ffc172f4701568
SHA512

fa6e11ad34666b9d0a54db57ad48e494e268a6be850c3421149021431bedc47a849a53d0f68c667c19739cf2afa06a40aabafff09722929d57e8cbe3661c7b4d
SSDEEP

6144:/igf1QLinMjG5kdHsBd8HkZvLJ0DJKtJoUTx5JPccJM+FtkedAqsPBXi54F5zVR9:/igfOL2M+kygH2LdlTgfB1o02qL

Score

7^/10

Malware Config

Targets

- Target
  
  fb82418fc21bc10d4b1a1115adfbe16f4d65cb9935e72475e3ffc172f4701568
- Size
  
  462KB
- MD5
  
  047852f254f727f3ece3da7d9e02a890
- SHA1
  
  fe2c5c5255fc718b2e1c12fe5595822087ea8e7e
- SHA256
  
  fb82418fc21bc10d4b1a1115adfbe16f4d65cb9935e72475e3ffc172f4701568
- SHA512
  
  fa6e11ad34666b9d0a54db57ad48e494e268a6be850c3421149021431bedc47a849a53d0f68c667c19739cf2afa06a40aabafff09722929d57e8cbe3661c7b4d
- SSDEEP
  
  6144:/igf1QLinMjG5kdHsBd8HkZvLJ0DJKtJoUTx5JPccJM+FtkedAqsPBXi54F5zVR9:/igfOL2M+kygH2LdlTgfB1o02qL
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2