b64a84d1f88e4e78464a1901c1cb5bbd5f00bb73203d719e64e072157a087b53 | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.DownLoader46.56394.10790.4737.exe
Size

106KB
Sample

240406-2lhvcadg94
MD5

fe380780b5c35bd6d54541791151c2be
SHA1

7fe3a583cf91474c733f85cebf3c857682e269e1
SHA256

b64a84d1f88e4e78464a1901c1cb5bbd5f00bb73203d719e64e072157a087b53
SHA512

ba05ba8aa13c4bc1cf98fbf6c08b021e8b19354098e0397fc8e1e5d3dcce367c1063203f24e50d0973193f6535681d0a43486e5dade5d112853b7a2fe8739b6c
SSDEEP

1536:lIpbrxKOcuS11Phbiyn2TCdfGyJVGJkyrt517EwM+UPpe5xKOcuS11Phbiyn2TCf:KpbrsISnRGPJkGt74GsISnRF

Score

7^/10

Malware Config

Targets

- Target
  
  SecuriteInfo.com.Trojan.DownLoader46.56394.10790.4737.exe
- Size
  
  106KB
- MD5
  
  fe380780b5c35bd6d54541791151c2be
- SHA1
  
  7fe3a583cf91474c733f85cebf3c857682e269e1
- SHA256
  
  b64a84d1f88e4e78464a1901c1cb5bbd5f00bb73203d719e64e072157a087b53
- SHA512
  
  ba05ba8aa13c4bc1cf98fbf6c08b021e8b19354098e0397fc8e1e5d3dcce367c1063203f24e50d0973193f6535681d0a43486e5dade5d112853b7a2fe8739b6c
- SSDEEP
  
  1536:lIpbrxKOcuS11Phbiyn2TCdfGyJVGJkyrt517EwM+UPpe5xKOcuS11Phbiyn2TCf:KpbrsISnRGPJkGt74GsISnRF
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2