32871f613d7a5dc240d2082f887311c85d54bf2d0c80649795d5884ada002577 | Triage

Sharing

General

Target

32871f613d7a5dc240d2082f887311c85d54bf2d0c80649795d5884ada002577
Size

657KB
Sample

240429-yyndtabg81
MD5

246cd7d7a8e1ca74c1463b9a1410b76f
SHA1

09ab102f944fd2aadbe482e8a25ff2edd9f369cf
SHA256

32871f613d7a5dc240d2082f887311c85d54bf2d0c80649795d5884ada002577
SHA512

1efbf3679ab6d9564d629ab021455eb790f6ab03c94ceed765521412c64dd6ae86ae3aa32ad2ef92c1bac9fa830a86c26ee461e01bd6ded741aa0cffd4e24300
SSDEEP

12288:w+67XR9JSSxvYGdodHDusQHNd1KidKjttRYLwL:w+6N986Y7DusQHNd1KidKjttRYLwL

Score

7^/10

Malware Config

Targets

- Target
  
  32871f613d7a5dc240d2082f887311c85d54bf2d0c80649795d5884ada002577
- Size
  
  657KB
- MD5
  
  246cd7d7a8e1ca74c1463b9a1410b76f
- SHA1
  
  09ab102f944fd2aadbe482e8a25ff2edd9f369cf
- SHA256
  
  32871f613d7a5dc240d2082f887311c85d54bf2d0c80649795d5884ada002577
- SHA512
  
  1efbf3679ab6d9564d629ab021455eb790f6ab03c94ceed765521412c64dd6ae86ae3aa32ad2ef92c1bac9fa830a86c26ee461e01bd6ded741aa0cffd4e24300
- SSDEEP
  
  12288:w+67XR9JSSxvYGdodHDusQHNd1KidKjttRYLwL:w+6N986Y7DusQHNd1KidKjttRYLwL
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2