db911f95ce0d1262911e5c405ca40dcdc870974b8ef25d827909413ee6bdda66 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db911f95ce0d1262911e5c405ca40dcdc870974b8ef25d827909413ee6bdda66
Size

56KB
Sample

240310-btv7jagh9v
MD5

7d39c467a6d5b676dcdcfa54600c6583
SHA1

f37932038b1511011cd15e6555fe164828bf7b72
SHA256

db911f95ce0d1262911e5c405ca40dcdc870974b8ef25d827909413ee6bdda66
SHA512

ffef27a99af8a538ff65881ce2d4a2cfe994dd12111f75b8de068ed78644b567dd4d02a1103f752bbe29328756a6c9eb814939a7f1ac2f3626f0246ca72e6fd1
SSDEEP

1536:IV/AAJdi1zB3E1yshODwuPdB8I+Jr/Dt0:IVAADiv3E1yshOb

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  db911f95ce0d1262911e5c405ca40dcdc870974b8ef25d827909413ee6bdda66
- Size
  
  56KB
- MD5
  
  7d39c467a6d5b676dcdcfa54600c6583
- SHA1
  
  f37932038b1511011cd15e6555fe164828bf7b72
- SHA256
  
  db911f95ce0d1262911e5c405ca40dcdc870974b8ef25d827909413ee6bdda66
- SHA512
  
  ffef27a99af8a538ff65881ce2d4a2cfe994dd12111f75b8de068ed78644b567dd4d02a1103f752bbe29328756a6c9eb814939a7f1ac2f3626f0246ca72e6fd1
- SSDEEP
  
  1536:IV/AAJdi1zB3E1yshODwuPdB8I+Jr/Dt0:IVAADiv3E1yshOb
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2