a49d6efa641852bd8bf501ee0aa414626c334af6f707ab8a04cf16b8957e13aa | Triage

Sharing

General

Target

cd849346a352a38feb22d8941d2068d8
Size

49KB
Sample

240316-jraf2seh2y
MD5

cd849346a352a38feb22d8941d2068d8
SHA1

9eb6a524d9185af11be1189bf583abde194dd35d
SHA256

a49d6efa641852bd8bf501ee0aa414626c334af6f707ab8a04cf16b8957e13aa
SHA512

bb940cecbc923f8e691fe077bc255bbc78e2ee3142eba9e698be6f6597c37f61b395188016db1b6b38f632f9ab7b47ecd79c062a2bf14fd1ad3a2a716ea4b7be
SSDEEP

768:0kv2vcaKsl+ZcUEsOLSQ/tWZqkPoK7UZbwHZe4inoejTGt2Caou33CbFrl2xy:0kv2XslyktwZUHZknoejT9IcCbFrIY

Score

7^/10

Malware Config

Targets

- Target
  
  cd849346a352a38feb22d8941d2068d8
- Size
  
  49KB
- MD5
  
  cd849346a352a38feb22d8941d2068d8
- SHA1
  
  9eb6a524d9185af11be1189bf583abde194dd35d
- SHA256
  
  a49d6efa641852bd8bf501ee0aa414626c334af6f707ab8a04cf16b8957e13aa
- SHA512
  
  bb940cecbc923f8e691fe077bc255bbc78e2ee3142eba9e698be6f6597c37f61b395188016db1b6b38f632f9ab7b47ecd79c062a2bf14fd1ad3a2a716ea4b7be
- SSDEEP
  
  768:0kv2vcaKsl+ZcUEsOLSQ/tWZqkPoK7UZbwHZe4inoejTGt2Caou33CbFrl2xy:0kv2XslyktwZUHZknoejT9IcCbFrIY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2