5bacfcafe3504acfab80b9e675e79c903ad3db6f3d4a86347554b563e7e94992 | Triage

Sharing

General

Target

5bacfcafe3504acfab80b9e675e79c903ad3db6f3d4a86347554b563e7e94992
Size

72KB
Sample

240420-2d2x9abf24
MD5

31b553182fb249e1b1b98c0f7cdcc8d4
SHA1

1e2a33857c05916ee71d583313cd8a7713f67aee
SHA256

5bacfcafe3504acfab80b9e675e79c903ad3db6f3d4a86347554b563e7e94992
SHA512

47dc08f49ad1fdab47ccace9e05ad03a285c65915b5ebf413e6fc4a337cbd4a9129f8fc9311e56e333f78c971f305c50b54cebc11edd3c9aa7efc01a1433b745
SSDEEP

768:SaQRYAAjW593LabCD/6/Xl2E/Ctt4WSrAK/G:SlPACze2JSMYG

Score

7^/10

Malware Config

Targets

- Target
  
  5bacfcafe3504acfab80b9e675e79c903ad3db6f3d4a86347554b563e7e94992
- Size
  
  72KB
- MD5
  
  31b553182fb249e1b1b98c0f7cdcc8d4
- SHA1
  
  1e2a33857c05916ee71d583313cd8a7713f67aee
- SHA256
  
  5bacfcafe3504acfab80b9e675e79c903ad3db6f3d4a86347554b563e7e94992
- SHA512
  
  47dc08f49ad1fdab47ccace9e05ad03a285c65915b5ebf413e6fc4a337cbd4a9129f8fc9311e56e333f78c971f305c50b54cebc11edd3c9aa7efc01a1433b745
- SSDEEP
  
  768:SaQRYAAjW593LabCD/6/Xl2E/Ctt4WSrAK/G:SlPACze2JSMYG
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2