9ffe2fcdd526cefed12ef1e69feafc6e8185dc3f06e5e0353551b13c6290b47e | Triage

Sharing

General

Target

9ffe2fcdd526cefed12ef1e69feafc6e8185dc3f06e5e0353551b13c6290b47e
Size

549KB
Sample

240421-bevx8aeg67
MD5

0e3ede2748afbcfe06c96e7020a8ec38
SHA1

4dc922a82499b0034e4fe2c54fb4811399a03dd9
SHA256

9ffe2fcdd526cefed12ef1e69feafc6e8185dc3f06e5e0353551b13c6290b47e
SHA512

2c1afca6716f4d1ca934e7b668e9e800682ec13b4cc18f46dfff1f0bf43ce47d08e7a01a19001cfb7b209215c9dffadbb596ffd5ef268d0ccff4201eb4f120f1
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAx3:dqDAwl0xPTMiR9JSSxPUKYGdodHc

Score

7^/10

Malware Config

Targets

- Target
  
  9ffe2fcdd526cefed12ef1e69feafc6e8185dc3f06e5e0353551b13c6290b47e
- Size
  
  549KB
- MD5
  
  0e3ede2748afbcfe06c96e7020a8ec38
- SHA1
  
  4dc922a82499b0034e4fe2c54fb4811399a03dd9
- SHA256
  
  9ffe2fcdd526cefed12ef1e69feafc6e8185dc3f06e5e0353551b13c6290b47e
- SHA512
  
  2c1afca6716f4d1ca934e7b668e9e800682ec13b4cc18f46dfff1f0bf43ce47d08e7a01a19001cfb7b209215c9dffadbb596ffd5ef268d0ccff4201eb4f120f1
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAx3:dqDAwl0xPTMiR9JSSxPUKYGdodHc
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2