dab9bbeba5ea4d1e79f4b32ec7fa76ec1867946825900ca41caec6193a77fcea | Triage

Sharing

General

Target

c6d71ae78932330b2dcd0a64b4a6d121
Size

24KB
Sample

240313-zq8kfsgf4s
MD5

c6d71ae78932330b2dcd0a64b4a6d121
SHA1

5e8da40ac26eef45ca48236fb9a4b23de802cd52
SHA256

dab9bbeba5ea4d1e79f4b32ec7fa76ec1867946825900ca41caec6193a77fcea
SHA512

473c291eb3372a3bd0bb626424dfe1a51e1cf77d750c41fecade7139da693e9912f48e9e3bc214347c94dbfa705d75c33f7c9a333e8fb1411e91c2ee5f262b8b
SSDEEP

384:/QaQWRIgS3Wvr+DipTy08EqgBq+MmOjso7D4bHIin+5amcz/9:/fhR+SEipTyC3Bq+MFhC+5amY9

Score

7^/10

Malware Config

Targets

- Target
  
  c6d71ae78932330b2dcd0a64b4a6d121
- Size
  
  24KB
- MD5
  
  c6d71ae78932330b2dcd0a64b4a6d121
- SHA1
  
  5e8da40ac26eef45ca48236fb9a4b23de802cd52
- SHA256
  
  dab9bbeba5ea4d1e79f4b32ec7fa76ec1867946825900ca41caec6193a77fcea
- SHA512
  
  473c291eb3372a3bd0bb626424dfe1a51e1cf77d750c41fecade7139da693e9912f48e9e3bc214347c94dbfa705d75c33f7c9a333e8fb1411e91c2ee5f262b8b
- SSDEEP
  
  384:/QaQWRIgS3Wvr+DipTy08EqgBq+MmOjso7D4bHIin+5amcz/9:/fhR+SEipTyC3Bq+MFhC+5amY9
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2