cdf19006117e251ae86916985128be24a8fbe4ec787cc653853e215e8d1a673b | Triage

Sharing

General

Target

cdf19006117e251ae86916985128be24a8fbe4ec787cc653853e215e8d1a673b
Size

53KB
Sample

240417-e3vtxafc5s
MD5

cb6371fd703bba0dbe097b8ec5d4d648
SHA1

b53e42b2743f281d449febdb54fa325b2fee7d3f
SHA256

cdf19006117e251ae86916985128be24a8fbe4ec787cc653853e215e8d1a673b
SHA512

f4a68d6dd28786057117d88cf3c8110c13f6c4b9f619219cc4e226a44e4a4c56a183a99d5bf90715ce293db91de94a561dc2825fc467a2064d7dcd4fcd8078b4
SSDEEP

768:MApQr0ovdFJI34eGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENREMZ7V:MAaDJlMsh7pWezEPJB+Oh

Score

7^/10

Malware Config

Targets

- Target
  
  cdf19006117e251ae86916985128be24a8fbe4ec787cc653853e215e8d1a673b
- Size
  
  53KB
- MD5
  
  cb6371fd703bba0dbe097b8ec5d4d648
- SHA1
  
  b53e42b2743f281d449febdb54fa325b2fee7d3f
- SHA256
  
  cdf19006117e251ae86916985128be24a8fbe4ec787cc653853e215e8d1a673b
- SHA512
  
  f4a68d6dd28786057117d88cf3c8110c13f6c4b9f619219cc4e226a44e4a4c56a183a99d5bf90715ce293db91de94a561dc2825fc467a2064d7dcd4fcd8078b4
- SSDEEP
  
  768:MApQr0ovdFJI34eGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENREMZ7V:MAaDJlMsh7pWezEPJB+Oh
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2