05d72109228c6beb744e3c782d6147a6a84b0fa942bdbdbf6ded9be00f9a3d18 | Triage

Sharing

General

Target

05d72109228c6beb744e3c782d6147a6a84b0fa942bdbdbf6ded9be00f9a3d18
Size

38KB
Sample

240420-wxyr2seh9v
MD5

8047d8d0d20160faedc3585db3623de3
SHA1

677f322dfbe0b191351f4b99415e6db0850193b6
SHA256

05d72109228c6beb744e3c782d6147a6a84b0fa942bdbdbf6ded9be00f9a3d18
SHA512

7915aeb31f850797b5a3345328de7d16b1a4bee7daad2953ae5dab84cfd2afbc311f5aac09abc2bff440c1370b2a24b53e8719cf34cdcacec7f9dbda5f96705d
SSDEEP

768:m8eRH+9lFh0ul16sh7iQroCHXf+RjFBSuB2XG:m9l+Z16sh7iQroCWRB0uP

Score

7^/10

Malware Config

Targets

- Target
  
  05d72109228c6beb744e3c782d6147a6a84b0fa942bdbdbf6ded9be00f9a3d18
- Size
  
  38KB
- MD5
  
  8047d8d0d20160faedc3585db3623de3
- SHA1
  
  677f322dfbe0b191351f4b99415e6db0850193b6
- SHA256
  
  05d72109228c6beb744e3c782d6147a6a84b0fa942bdbdbf6ded9be00f9a3d18
- SHA512
  
  7915aeb31f850797b5a3345328de7d16b1a4bee7daad2953ae5dab84cfd2afbc311f5aac09abc2bff440c1370b2a24b53e8719cf34cdcacec7f9dbda5f96705d
- SSDEEP
  
  768:m8eRH+9lFh0ul16sh7iQroCHXf+RjFBSuB2XG:m9l+Z16sh7iQroCWRB0uP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2