1988e39bff64eb08f849e310e17ba5ad8b4900852cab1e002e7c3415e9b30f02 | Triage

Sharing

General

Target

0f9f7e31a769bdb4e46b47b00544192b.bin
Size

130KB
Sample

240312-blws4abf8t
MD5

0f9f7e31a769bdb4e46b47b00544192b
SHA1

57874ba14bbd53d38b783bf797c04cdfc975c1e4
SHA256

1988e39bff64eb08f849e310e17ba5ad8b4900852cab1e002e7c3415e9b30f02
SHA512

07cff06d0817fbe57be12ba985dd7548856980a2f451cca9f408c26290fa2d0fe06562ee0a06326f3f4837fda09019be474d837fc955d143d810fb83378fafe1
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp699GNtL1ewb:V6a+pOtEvwDpjtzs

Score

7^/10

Malware Config

Targets

- Target
  
  0f9f7e31a769bdb4e46b47b00544192b.bin
- Size
  
  130KB
- MD5
  
  0f9f7e31a769bdb4e46b47b00544192b
- SHA1
  
  57874ba14bbd53d38b783bf797c04cdfc975c1e4
- SHA256
  
  1988e39bff64eb08f849e310e17ba5ad8b4900852cab1e002e7c3415e9b30f02
- SHA512
  
  07cff06d0817fbe57be12ba985dd7548856980a2f451cca9f408c26290fa2d0fe06562ee0a06326f3f4837fda09019be474d837fc955d143d810fb83378fafe1
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp699GNtL1ewb:V6a+pOtEvwDpjtzs
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2