4dd6f41639f7ef83a9937e69c38b62dd9e548896c0a6b36647bfcccc1a20c86d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dd6f41639f7ef83a9937e69c38b62dd9e548896c0a6b36647bfcccc1a20c86d
Size

42KB
Sample

240422-1pa38sgg96
MD5

23394d650c6614146131f0fd58cadce7
SHA1

f20cd8014037be2aa8a4aeee0533b9f27829d3f9
SHA256

4dd6f41639f7ef83a9937e69c38b62dd9e548896c0a6b36647bfcccc1a20c86d
SHA512

00d8383c357bcda90dabdf18c231e4468a0b26ce2510e8d1e317d433b271d241384fd06edb21b90513a87bed42dd9dee72f38255a7ce739522c9c231ac3182c6
SSDEEP

768:0Bb2wck/+M2bPP66S+m3IUxU1ccSgjmC5:0NPck/GLP66BdUxU1cIjmC5

Score

7^/10

Malware Config

Targets

- Target
  
  4dd6f41639f7ef83a9937e69c38b62dd9e548896c0a6b36647bfcccc1a20c86d
- Size
  
  42KB
- MD5
  
  23394d650c6614146131f0fd58cadce7
- SHA1
  
  f20cd8014037be2aa8a4aeee0533b9f27829d3f9
- SHA256
  
  4dd6f41639f7ef83a9937e69c38b62dd9e548896c0a6b36647bfcccc1a20c86d
- SHA512
  
  00d8383c357bcda90dabdf18c231e4468a0b26ce2510e8d1e317d433b271d241384fd06edb21b90513a87bed42dd9dee72f38255a7ce739522c9c231ac3182c6
- SSDEEP
  
  768:0Bb2wck/+M2bPP66S+m3IUxU1ccSgjmC5:0NPck/GLP66BdUxU1cIjmC5
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2