93542d6e0cb546ade0a4fb5ccedcc1d6dcb3aaba9b44183e692b76fc363cc15f | Triage

Sharing

General

Target

c2e1f3e3fa536facf8404a621607558c
Size

14.8MB
Sample

240312-j36nmacd4w
MD5

c2e1f3e3fa536facf8404a621607558c
SHA1

a6dfe475decd18fe22daa0d17d5a94f82453cfff
SHA256

93542d6e0cb546ade0a4fb5ccedcc1d6dcb3aaba9b44183e692b76fc363cc15f
SHA512

2b332fb30474c0cc7c54586dbc14cd35d3655ed3c2fb0db630f7edef8ab328d1c7037a079d115eec35a2b8e474a7f2e18b92638ecd951acedafa6a5b755c0ab7
SSDEEP

393216:nefNC/zPdHvWwjof9H+xdQlG6tSuQL0c6JkSBmNBStVKFOM:ecdHzoF8dQc6tSLE9mvvFOM

Score

7^/10

Malware Config

Targets

- Target
  
  c2e1f3e3fa536facf8404a621607558c
- Size
  
  14.8MB
- MD5
  
  c2e1f3e3fa536facf8404a621607558c
- SHA1
  
  a6dfe475decd18fe22daa0d17d5a94f82453cfff
- SHA256
  
  93542d6e0cb546ade0a4fb5ccedcc1d6dcb3aaba9b44183e692b76fc363cc15f
- SHA512
  
  2b332fb30474c0cc7c54586dbc14cd35d3655ed3c2fb0db630f7edef8ab328d1c7037a079d115eec35a2b8e474a7f2e18b92638ecd951acedafa6a5b755c0ab7
- SSDEEP
  
  393216:nefNC/zPdHvWwjof9H+xdQlG6tSuQL0c6JkSBmNBStVKFOM:ecdHzoF8dQc6tSLE9mvvFOM
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2