a779cbe76bdde73fad1cf06060011ea2de4518dc1df69e025930c8063d7c86d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

719ec91955451b6b54ee581adabc5ebd
Size

200KB
Sample

240409-yjb28sbg5y
MD5

719ec91955451b6b54ee581adabc5ebd
SHA1

8aa7ea15bd142a0d394441465ac5affdf84b3718
SHA256

a779cbe76bdde73fad1cf06060011ea2de4518dc1df69e025930c8063d7c86d0
SHA512

a0a0c720e921d19feb2372f9413bb2614c94e57e0a263306664a48684181a9e036178e620ebaca56a7e580e9a3dc9dff4e46a027767516b25b1b1d2d4a46d9f9
SSDEEP

3072:U1w/Jeo3y4CpCfCGCCOCwC9CvCFCfCLCvCUCLC2FInROUSRSGSuSQSmSNS4SQSsW:H/go3yGFInRO

Score

7^/10

Malware Config

Targets

- Target
  
  719ec91955451b6b54ee581adabc5ebd
- Size
  
  200KB
- MD5
  
  719ec91955451b6b54ee581adabc5ebd
- SHA1
  
  8aa7ea15bd142a0d394441465ac5affdf84b3718
- SHA256
  
  a779cbe76bdde73fad1cf06060011ea2de4518dc1df69e025930c8063d7c86d0
- SHA512
  
  a0a0c720e921d19feb2372f9413bb2614c94e57e0a263306664a48684181a9e036178e620ebaca56a7e580e9a3dc9dff4e46a027767516b25b1b1d2d4a46d9f9
- SSDEEP
  
  3072:U1w/Jeo3y4CpCfCGCCOCwC9CvCFCfCLCvCUCLC2FInROUSRSGSuSQSmSNS4SQSsW:H/go3yGFInRO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2