038228c7635a03756e4f418fcba2ed22eab62febc61e98555b5b1a0e53ac2353 | Triage

Sharing

General

Target

038228c7635a03756e4f418fcba2ed22eab62febc61e98555b5b1a0e53ac2353
Size

862KB
Sample

240417-q8jjlsaf99
MD5

2958405ca7655c1626d3e6e133fe1ea5
SHA1

3f273dc77c53d0ab15d5140cad9822e2553f662e
SHA256

038228c7635a03756e4f418fcba2ed22eab62febc61e98555b5b1a0e53ac2353
SHA512

e2fcfc9940b1c564efb9db52228503ed80dcbb0064dfc5f15fb79f76404709c2f4430c6f4998ad91320cf24a357537bafb7e0490f72fbcd35f00a080f4f9b10a
SSDEEP

24576:vG4FgS53WrH2f8vqTSODGBsfYPjTWNxBNwVLIyYdCoAni95l:vaS5mL2dNAsgPjT2NuLdYJAnQ5l

Score

7^/10

Malware Config

Targets

- Target
  
  8dea2d324a4bf1fb49bd5eaf009fdafaa4001807912efff03f411082e01d24b7.exe
- Size
  
  993KB
- MD5
  
  0374a5265d5ec5febcd31867d36fc3b0
- SHA1
  
  7a0ddd9ea155a4bc7decf202fba4f3ab00945308
- SHA256
  
  8dea2d324a4bf1fb49bd5eaf009fdafaa4001807912efff03f411082e01d24b7
- SHA512
  
  408b9ac6251c9bdc6b4061e99c3e05e77e06334a283be3958e7c98053133f9c0a69fb08372f5c739ab3879d5539b022d15da30f99e1adbae451c9574200e6b86
- SSDEEP
  
  24576:He3veFbXAD9zWi4MxO6m6b/fYLGACf9Dtc2Py/+:He/etqzXOu1Ff9DtTyW
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2