2b171bc3e89b9c01e7ebf3cc11cc4b67be6fd241ecf95a91a943998b21f641fb | Triage

Sharing

General

Target

2b171bc3e89b9c01e7ebf3cc11cc4b67be6fd241ecf95a91a943998b21f641fb
Size

601KB
Sample

240326-w82m3sca9t
MD5

b552c7357396915b79bd9eb88f171941
SHA1

f0295515214e277e8603fba373b75038449acac2
SHA256

2b171bc3e89b9c01e7ebf3cc11cc4b67be6fd241ecf95a91a943998b21f641fb
SHA512

a40b17ca24075809b703e3c848112887a92865d2ece529cba95d7d62cbcb2527d92c2b3a099f3c68d8aefef112cd6e4acbf887e8540822cafc2cb9c8dae39ea3
SSDEEP

6144:FqDAwl0xPTMiR9JSSxPUKYGdodH/baqE7Al8jki:F+67XR9JSSxvYGdodH/1Cx

Score

7^/10

Malware Config

Targets

- Target
  
  2b171bc3e89b9c01e7ebf3cc11cc4b67be6fd241ecf95a91a943998b21f641fb
- Size
  
  601KB
- MD5
  
  b552c7357396915b79bd9eb88f171941
- SHA1
  
  f0295515214e277e8603fba373b75038449acac2
- SHA256
  
  2b171bc3e89b9c01e7ebf3cc11cc4b67be6fd241ecf95a91a943998b21f641fb
- SHA512
  
  a40b17ca24075809b703e3c848112887a92865d2ece529cba95d7d62cbcb2527d92c2b3a099f3c68d8aefef112cd6e4acbf887e8540822cafc2cb9c8dae39ea3
- SSDEEP
  
  6144:FqDAwl0xPTMiR9JSSxPUKYGdodH/baqE7Al8jki:F+67XR9JSSxvYGdodH/1Cx
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2