601b90a617a1c312decb433339ceb811f90829a50222f839a30066456d001c40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

601b90a617a1c312decb433339ceb811f90829a50222f839a30066456d001c40
Size

656KB
Sample

240314-ytyc8adg4v
MD5

1ea4d221cd4f2e6a21515a865eade611
SHA1

b4d7d932bb253eb70fe0c7440d3ba8dd28256ea4
SHA256

601b90a617a1c312decb433339ceb811f90829a50222f839a30066456d001c40
SHA512

90c2d6431b10552440867602daf3ecd2a9ce407c586f4db67b400a860ad5b7e887c2e17b5cefa270f05a30a49e2103faed57c7a6d5531fcb52df606215db3765
SSDEEP

12288:w+67XR9JSSxvYGdodHDusQHNd1KidKjttRYLwm:w+6N986Y7DusQHNd1KidKjttRYLwm

Score

7^/10

Malware Config

Targets

- Target
  
  601b90a617a1c312decb433339ceb811f90829a50222f839a30066456d001c40
- Size
  
  656KB
- MD5
  
  1ea4d221cd4f2e6a21515a865eade611
- SHA1
  
  b4d7d932bb253eb70fe0c7440d3ba8dd28256ea4
- SHA256
  
  601b90a617a1c312decb433339ceb811f90829a50222f839a30066456d001c40
- SHA512
  
  90c2d6431b10552440867602daf3ecd2a9ce407c586f4db67b400a860ad5b7e887c2e17b5cefa270f05a30a49e2103faed57c7a6d5531fcb52df606215db3765
- SSDEEP
  
  12288:w+67XR9JSSxvYGdodHDusQHNd1KidKjttRYLwm:w+6N986Y7DusQHNd1KidKjttRYLwm
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2