fae97b8daa70a7f7ea66936f4e802446a8638e76ba8f0be680ef3affb33a1a8a | Triage

Sharing

General

Target

bf7ed24708568273356752dd8d5bb9b9
Size

263KB
Sample

240311-bzfc9sgh96
MD5

bf7ed24708568273356752dd8d5bb9b9
SHA1

040516f182b1f14d543b996b83c7c7c19f1f19af
SHA256

fae97b8daa70a7f7ea66936f4e802446a8638e76ba8f0be680ef3affb33a1a8a
SHA512

591e3cd2c34b77140eacd01bb7771a8bed6c90db51ca37a953a28ff4af1a19d16229e66044176720a06133f6fe462bfc470d1b3858743e29600a6a6ab5bc3bb1
SSDEEP

3072:ZYUb5QoJ4g+Ri+ZjKIz1ZdW4SrOLVSVpu:ZY7xhKSZI4zLVSVpu

Score

7^/10

Malware Config

Targets

- Target
  
  bf7ed24708568273356752dd8d5bb9b9
- Size
  
  263KB
- MD5
  
  bf7ed24708568273356752dd8d5bb9b9
- SHA1
  
  040516f182b1f14d543b996b83c7c7c19f1f19af
- SHA256
  
  fae97b8daa70a7f7ea66936f4e802446a8638e76ba8f0be680ef3affb33a1a8a
- SHA512
  
  591e3cd2c34b77140eacd01bb7771a8bed6c90db51ca37a953a28ff4af1a19d16229e66044176720a06133f6fe462bfc470d1b3858743e29600a6a6ab5bc3bb1
- SSDEEP
  
  3072:ZYUb5QoJ4g+Ri+ZjKIz1ZdW4SrOLVSVpu:ZY7xhKSZI4zLVSVpu
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2