8d8929d60c8b38ab262ebf681c0c119e768e840dc596fd3a0f88fb3a57a8211c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d8929d60c8b38ab262ebf681c0c119e768e840dc596fd3a0f88fb3a57a8211c
Size

35KB
Sample

240314-1c9e9shg95
MD5

90514d7350364e61e9561b0df4d6329e
SHA1

c4728e7da66a4e977c1427df00e2de969d11aad9
SHA256

8d8929d60c8b38ab262ebf681c0c119e768e840dc596fd3a0f88fb3a57a8211c
SHA512

696567f018845e4cb6184d15a95b4082a44104d3030e15ce6016a22b9baecd9576a5f9d1b428e163918d684184ead9dd4cc2bc3d25bd29f1868144213ce65361
SSDEEP

768:y2cKhY94XKj9wGzfcgtgAvH2bEzPfi+p4z:xcKhY9aMdj28fliz

Score

7^/10

Malware Config

Targets

- Target
  
  8d8929d60c8b38ab262ebf681c0c119e768e840dc596fd3a0f88fb3a57a8211c
- Size
  
  35KB
- MD5
  
  90514d7350364e61e9561b0df4d6329e
- SHA1
  
  c4728e7da66a4e977c1427df00e2de969d11aad9
- SHA256
  
  8d8929d60c8b38ab262ebf681c0c119e768e840dc596fd3a0f88fb3a57a8211c
- SHA512
  
  696567f018845e4cb6184d15a95b4082a44104d3030e15ce6016a22b9baecd9576a5f9d1b428e163918d684184ead9dd4cc2bc3d25bd29f1868144213ce65361
- SSDEEP
  
  768:y2cKhY94XKj9wGzfcgtgAvH2bEzPfi+p4z:xcKhY9aMdj28fliz
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2