78c652a3d26b824e94d1f0d63e68b1cdd7050d918053a0ac5a68dd2e1c213739 | Triage

Sharing

General

Target

78c652a3d26b824e94d1f0d63e68b1cdd7050d918053a0ac5a68dd2e1c213739
Size

98KB
Sample

240326-1bmvwafg5y
MD5

46bac765e9ec6c09dd7d77d64878b084
SHA1

6aa937e49918bc1f148302253f8b38e4342aff4e
SHA256

78c652a3d26b824e94d1f0d63e68b1cdd7050d918053a0ac5a68dd2e1c213739
SHA512

ab3e68f20fdcffcee4db0e6ad956e111bba39b066bd59612cee0c15aae68831dd32a853bfd955af7702a0a5cef58dd5854bbd9e5f20573eeb00725bfe6fac45a
SSDEEP

1536:eAapJlQsh7pWezEPJK+U9LMeJb+BwJSK2l+EuWx0GFq:EJlQsweAxK7yeiGGAWy

Score

7^/10

Malware Config

Targets

- Target
  
  78c652a3d26b824e94d1f0d63e68b1cdd7050d918053a0ac5a68dd2e1c213739
- Size
  
  98KB
- MD5
  
  46bac765e9ec6c09dd7d77d64878b084
- SHA1
  
  6aa937e49918bc1f148302253f8b38e4342aff4e
- SHA256
  
  78c652a3d26b824e94d1f0d63e68b1cdd7050d918053a0ac5a68dd2e1c213739
- SHA512
  
  ab3e68f20fdcffcee4db0e6ad956e111bba39b066bd59612cee0c15aae68831dd32a853bfd955af7702a0a5cef58dd5854bbd9e5f20573eeb00725bfe6fac45a
- SSDEEP
  
  1536:eAapJlQsh7pWezEPJK+U9LMeJb+BwJSK2l+EuWx0GFq:EJlQsweAxK7yeiGGAWy
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2