38492964c5b4ba9828ccd836835c6e1b77a9230209ffb83507888a0d001afd86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38492964c5b4ba9828ccd836835c6e1b77a9230209ffb83507888a0d001afd86
Size

528KB
Sample

240408-y3azaaag65
MD5

244d8a00b3882af523954010da9361bf
SHA1

ff1e0e77f5204be1eb8f59021394d7edb95a4078
SHA256

38492964c5b4ba9828ccd836835c6e1b77a9230209ffb83507888a0d001afd86
SHA512

9782387eac123d2734d482be224c9420f87147698a9ac354f2ca33013e8dfca2c54c8e91ffa719f5934cd56ae459e49498bd39649e91f531eeeb51765630bbbc
SSDEEP

3072:4Cao5s1x1Pkl0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxZ:4qal8l0xPTMiR9JSSxPUKYGdodH2

Score

7^/10

Malware Config

Targets

- Target
  
  38492964c5b4ba9828ccd836835c6e1b77a9230209ffb83507888a0d001afd86
- Size
  
  528KB
- MD5
  
  244d8a00b3882af523954010da9361bf
- SHA1
  
  ff1e0e77f5204be1eb8f59021394d7edb95a4078
- SHA256
  
  38492964c5b4ba9828ccd836835c6e1b77a9230209ffb83507888a0d001afd86
- SHA512
  
  9782387eac123d2734d482be224c9420f87147698a9ac354f2ca33013e8dfca2c54c8e91ffa719f5934cd56ae459e49498bd39649e91f531eeeb51765630bbbc
- SSDEEP
  
  3072:4Cao5s1x1Pkl0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxZ:4qal8l0xPTMiR9JSSxPUKYGdodH2
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2