6214dcc2fc6ea19fb29755464fd96e1485dd95ffe1777ef278065eb6abd9912c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6214dcc2fc6ea19fb29755464fd96e1485dd95ffe1777ef278065eb6abd9912c
Size

536KB
Sample

240405-118hwaee46
MD5

3ecd25d43635baf3b236a4f48a4cd389
SHA1

61be8b7ae630a94f0743edd1a1f2a88aefe8e193
SHA256

6214dcc2fc6ea19fb29755464fd96e1485dd95ffe1777ef278065eb6abd9912c
SHA512

48f2c5fde46d8c1ae4925b4fba07f2ee731cd2f46779bc08c3bd15694a6cff6ce94066777c924e5c4052a4fe90712980609803c5d1b9cba2d07e7cedf6242f1b
SSDEEP

3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxW:wqDAwl0xPTMiR9JSSxPUKYGdodHv

Score

7^/10

Malware Config

Targets

- Target
  
  6214dcc2fc6ea19fb29755464fd96e1485dd95ffe1777ef278065eb6abd9912c
- Size
  
  536KB
- MD5
  
  3ecd25d43635baf3b236a4f48a4cd389
- SHA1
  
  61be8b7ae630a94f0743edd1a1f2a88aefe8e193
- SHA256
  
  6214dcc2fc6ea19fb29755464fd96e1485dd95ffe1777ef278065eb6abd9912c
- SHA512
  
  48f2c5fde46d8c1ae4925b4fba07f2ee731cd2f46779bc08c3bd15694a6cff6ce94066777c924e5c4052a4fe90712980609803c5d1b9cba2d07e7cedf6242f1b
- SSDEEP
  
  3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxW:wqDAwl0xPTMiR9JSSxPUKYGdodHv
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2