de4c3e3a16b74bb124230465c2e207a9896a21b717ba7647f5c37364b416f0e4 | Triage

Sharing

General

Target

de4c3e3a16b74bb124230465c2e207a9896a21b717ba7647f5c37364b416f0e4
Size

314KB
Sample

240420-ebezdafe86
MD5

08d30b4927f8f531a0943c012a5f16d5
SHA1

fd8862decca344d000ca319992fdbe836d40977d
SHA256

de4c3e3a16b74bb124230465c2e207a9896a21b717ba7647f5c37364b416f0e4
SHA512

97f4c25666055935e3b431eeb23c4c3f107f2a79b7980c2955a3353af2d5ffc45f886e18539964494571d7c73b33de87707d35ab5d5e53691f1737d216f2275e
SSDEEP

3072:mYUb5QoJ4g+LsP9iGqT8ZjKIz1ZdW4SrOLVSVpe1GhpSBfmW:mY699qT8hKSZI4zLVSVpe1GvOfZ

Score

7^/10

Malware Config

Targets

- Target
  
  de4c3e3a16b74bb124230465c2e207a9896a21b717ba7647f5c37364b416f0e4
- Size
  
  314KB
- MD5
  
  08d30b4927f8f531a0943c012a5f16d5
- SHA1
  
  fd8862decca344d000ca319992fdbe836d40977d
- SHA256
  
  de4c3e3a16b74bb124230465c2e207a9896a21b717ba7647f5c37364b416f0e4
- SHA512
  
  97f4c25666055935e3b431eeb23c4c3f107f2a79b7980c2955a3353af2d5ffc45f886e18539964494571d7c73b33de87707d35ab5d5e53691f1737d216f2275e
- SSDEEP
  
  3072:mYUb5QoJ4g+LsP9iGqT8ZjKIz1ZdW4SrOLVSVpe1GhpSBfmW:mY699qT8hKSZI4zLVSVpe1GvOfZ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2