d6fb4e84b42c2bf97b6cfa49b2ee34f61b462e04d97181b66de44149665b6feb | Triage

Sharing

General

Target

d6fb4e84b42c2bf97b6cfa49b2ee34f61b462e04d97181b66de44149665b6feb
Size

224KB
Sample

240425-egq9laeg72
MD5

29239936028f8eb516700014845eded3
SHA1

34734a314ca6cf889919726e1179502578925b87
SHA256

d6fb4e84b42c2bf97b6cfa49b2ee34f61b462e04d97181b66de44149665b6feb
SHA512

3a7b822470d77520cfc1874fa464ebba429b908fc9a9b78568afd7ee1088ac8071ab6494d60c120325b348d614eb9a6e1f48bae0623cb43dee3d07b2cc39815b
SSDEEP

3072:GG+KCdTZH9DhCjG8G3GbGVGBGfGuGxGWYcrf6Kad0:GGvCdTp1AYcD6Kad

Score

7^/10

Malware Config

Targets

- Target
  
  d6fb4e84b42c2bf97b6cfa49b2ee34f61b462e04d97181b66de44149665b6feb
- Size
  
  224KB
- MD5
  
  29239936028f8eb516700014845eded3
- SHA1
  
  34734a314ca6cf889919726e1179502578925b87
- SHA256
  
  d6fb4e84b42c2bf97b6cfa49b2ee34f61b462e04d97181b66de44149665b6feb
- SHA512
  
  3a7b822470d77520cfc1874fa464ebba429b908fc9a9b78568afd7ee1088ac8071ab6494d60c120325b348d614eb9a6e1f48bae0623cb43dee3d07b2cc39815b
- SSDEEP
  
  3072:GG+KCdTZH9DhCjG8G3GbGVGBGfGuGxGWYcrf6Kad0:GGvCdTp1AYcD6Kad
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2