97b5cf1d1feedee5a7585e6ad00cf5b9eafc9258f3b5ba57a044f66103671ed3 | Triage

Sharing

General

Target

97b5cf1d1feedee5a7585e6ad00cf5b9eafc9258f3b5ba57a044f66103671ed3
Size

53KB
Sample

240417-b9lyssae27
MD5

65230e591e75bf72db3e896881719d5c
SHA1

c50d78cc51d6134f0e8ec1c1d85edc0446e5dc3d
SHA256

97b5cf1d1feedee5a7585e6ad00cf5b9eafc9258f3b5ba57a044f66103671ed3
SHA512

937b202125e03ccb7c767201a6131382af250d01a1a67f5a66b3f377f3f0c85df91f660126c6c3f8ded0c0a5b2a677e4f80354d515706444a421ed065690360e
SSDEEP

768:MApQr0fvdFJI341GxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENREMZ7Zbj:MAaMJlBsh7pWezEPJB+Olbj

Score

7^/10

Malware Config

Targets

- Target
  
  97b5cf1d1feedee5a7585e6ad00cf5b9eafc9258f3b5ba57a044f66103671ed3
- Size
  
  53KB
- MD5
  
  65230e591e75bf72db3e896881719d5c
- SHA1
  
  c50d78cc51d6134f0e8ec1c1d85edc0446e5dc3d
- SHA256
  
  97b5cf1d1feedee5a7585e6ad00cf5b9eafc9258f3b5ba57a044f66103671ed3
- SHA512
  
  937b202125e03ccb7c767201a6131382af250d01a1a67f5a66b3f377f3f0c85df91f660126c6c3f8ded0c0a5b2a677e4f80354d515706444a421ed065690360e
- SSDEEP
  
  768:MApQr0fvdFJI341GxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENREMZ7Zbj:MAaMJlBsh7pWezEPJB+Olbj
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2