63fb3bf2822b8e3bc0217a525869097eb783f2e6b5d7a3ec71f884c3cbd89736 | Triage

Sharing

General

Target

c1db68f980a8d8744d998deb4831aa99
Size

324KB
Sample

240311-3ay8mabd36
MD5

c1db68f980a8d8744d998deb4831aa99
SHA1

ff39f971c27317b038a4d0a0141df1fc58e3f5b4
SHA256

63fb3bf2822b8e3bc0217a525869097eb783f2e6b5d7a3ec71f884c3cbd89736
SHA512

23a42820936acb2a303da08b80671564d1f388d594d1962c5c34ced523d0ed198a6be81aa89ff3919cf8bc0ec01dd3c2c6de07bef230d379bf1349951d383819
SSDEEP

6144:QYeF2idZecnl20lHRxp3gTe0M6E81xS0WcHpsFbBqaq:MF3Z4mxxR0MHoTAFbQ

Score

7^/10

Malware Config

Targets

- Target
  
  c1db68f980a8d8744d998deb4831aa99
- Size
  
  324KB
- MD5
  
  c1db68f980a8d8744d998deb4831aa99
- SHA1
  
  ff39f971c27317b038a4d0a0141df1fc58e3f5b4
- SHA256
  
  63fb3bf2822b8e3bc0217a525869097eb783f2e6b5d7a3ec71f884c3cbd89736
- SHA512
  
  23a42820936acb2a303da08b80671564d1f388d594d1962c5c34ced523d0ed198a6be81aa89ff3919cf8bc0ec01dd3c2c6de07bef230d379bf1349951d383819
- SSDEEP
  
  6144:QYeF2idZecnl20lHRxp3gTe0M6E81xS0WcHpsFbBqaq:MF3Z4mxxR0MHoTAFbQ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2