b8ffaf48fbe36bfef458c9c96b27358e898de8252dbab98aad4d08b13f3725c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8ffaf48fbe36bfef458c9c96b27358e898de8252dbab98aad4d08b13f3725c4
Size

549KB
Sample

240416-brqh9sff3t
MD5

4271499c58cc3d725d9809e30bedb5f8
SHA1

5b81d6a3093814918787db836cc9b99433539297
SHA256

b8ffaf48fbe36bfef458c9c96b27358e898de8252dbab98aad4d08b13f3725c4
SHA512

38e77462d345f3cbbf1efb7045dead1dfd28e90440cf02d6354b151cc31cb1ac3c627933bbaec8820a8e9b6fe088965995662c88d0cdf81943d49f0e892cacec
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxu:dqDAwl0xPTMiR9JSSxPUKYGdodHp

Score

7^/10

Malware Config

Targets

- Target
  
  b8ffaf48fbe36bfef458c9c96b27358e898de8252dbab98aad4d08b13f3725c4
- Size
  
  549KB
- MD5
  
  4271499c58cc3d725d9809e30bedb5f8
- SHA1
  
  5b81d6a3093814918787db836cc9b99433539297
- SHA256
  
  b8ffaf48fbe36bfef458c9c96b27358e898de8252dbab98aad4d08b13f3725c4
- SHA512
  
  38e77462d345f3cbbf1efb7045dead1dfd28e90440cf02d6354b151cc31cb1ac3c627933bbaec8820a8e9b6fe088965995662c88d0cdf81943d49f0e892cacec
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxu:dqDAwl0xPTMiR9JSSxPUKYGdodHp
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2